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About This Manual 



The KA670 CPU Module Technical Manual documents the functional, physical, and 
environmental characteristics of the KA670 CPU module. The manual also includes 
information on the MS670 memory expansion modules. 

There are two versions of the KA670 CPU module, KA670-AA and KA670-BA. This 
manual covers both versions. The KA670-BA CPU module is designed for use with 
workstations and servers. The KA670-BA is functionally equivalent to the KA670-AA, 
except that it does not support multiuser VMS and ULTRIX operating system licenses. 

Audience 

This manual is intended for a design engineer or applications programmer who is familiar 
with Digital's extended LSI-11 bus (Q22-bus) and the VAX instruction set. This manual 
should be used along with the VAX Architecture Reference Manual as a programmer's 
reference to the module. 

Organization 

The manual is divided into three parts. 
Overview and Installation 

• Chapter 1, "Overview," introduces the KA670 CPU module, the MS670 memory 
module, and the H3604 console module, including module features and specifications. 

• Chapter 2, "Installation and Configuration," describes the procedures for installing 
and configuring the CPU, memory, and console modules in the Q22-bus backplanes 
and system enclosures. 

Architecture 

• Chapter 3, "Central Processor and Floating Point Unit," describes the functions of the 
centra! processing unit (P-chip) and the floating point unit (F-chip). 

• Chapter 4, "Cache and Main Memory," describes the operation of the KA670 CPU 
module's cache memory as well as the feature of main memory. 

• Chapter 5, "The Console Line, TOY Clock, and Bus System," describes the console 
serial line and the time-of-year clock. The chapter also provides an overview of the 
KA670 bus system. 

• Chapter 6, "KA670 Boot and Diagnostic Facility," describes the boot and diagnostic 
registers, EPROM memory, battery backed-up RAM and hardware initialization. 

• Chapter 7, "Interface Subsystems," describes the interfaces the KA670 CPU module 
uses for the Q22-bus, Ethernet, and mass storage bus. 
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xxii About This Manual 

• Chapter 8, "KAGTO Error Handling,' describes unexpected KA670 system error 
exceptions and interrupts, from the macrocoder's point of view. 

Firmware 

• Chapter 9, "Firmware," describes the entry dispatch code, boot diagnostics, device 
booting sequence, console program, and console commands. 

Appendices 

• Appendix A, "Q22-bus Specification," describes the low-end member of Digital's bus 
family. AH of Digital's microcomputers, such as the Micro VAX 3500, MicroVAX 3600, 
and MicroPDP-11, use the Q22-bus. 

• Appendix B, "Specifications," describes the physical, electrical, and environmental 
characteristics of the KA670 CPU module. 

• Appendix C, "Address Assignments," provides a map of VAX memor,^ space. 

• Appendix D, "VAX Instruction Set," is a list of the VAX instructions, provided for 
reference only. 

• Appendbc E, "Machine State on Power-Up," describes the state of the KA670 after a 
power-up halt. 

• Appendix F, "Maintenance Operation Protocol (MOP) Support," describes the 
maintenance operation protocol (MOP) support features in the KA670 firmware. 

• Appendbc G, "ROM Partitioning," describes the public ROM partitioning and 
subroutine entry points that are guaranteed to be compatible over future versions 
of the KA670 firmware. 

• Appendbc H, "RAM Partitioning," describes how the KA670 firmware partitions the 1 
kilobji* of battery backed-up RAM. 

• Appendix I, "Data Structures," describes the global data structures used by the 
KA670 firmware. 

• Appendix J, " Error Messages ," provides a list of the expected responses to error 
conditions that may be encountered during various transactions on the KA670 
module. 

• The glossary defines many of the acronyms and new terms used in this manual. 
Conventions 

The following conventions are used in this manual: 
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Table 1 Conventions 



Convention Meaning 



<x:y> Represents a bit field, a set of lines, or a set of signals, ranging from x through y. 

For example, RO <7;4> Indicates bits 7 through 4 in a general -purpose register 

RO. 
[x:y] Represents a range of bits, from y through x. 

2014 0030 Eight-digit numbers in this document are hexadecimal longwords, typically 

representing VAX-32 bit addresses or data. 
456io, 12i6 In sections where octal, decimal, and hexadecimal numbers may appear, the 

radix of a number is included to avoid confusion. 

Keys or switches that are labeled on th e equ ipment appear in a box. 

For key sequences that begin with the [Ctrl| key, hold down Ctrl and press the 

second key. 

Caution Contains information to prevent damage to equipment. 

Note Contains general information. 

variable The names of variable command parameters and options appear in italics. 

{) Encloses a required part of a console command. 

[ ] Encloses an option to a console command. 

Represents a list command elements. 



Return 



Ctrl C 



Related Documents 

The following documents are related to the KA670 CPU: 

KA670 CPU System Maintenance Manual 

MicroVAX Maintenance Kit 

VAX Architecture Handbook 

VAX Architecture Reference Manual 

You can order these documents by phone or mail. 

Continental USA and Puerto Rico 

Call 800-258-1710 or mail to: 

Digital Equipment Corporation 
P.O. Box CS2008 
Nashua, NH 03061 

New Hampshire, Alaska, and Hawaii 

Call 1-603-884-6660. 

Outside the USA and Puerto Rico Mail to: 

Digital Equipment Corporation 

Attn: Accessories and Supplies Business Manager 

c/o Local Subsidiary or Digital-Approved Distributor 



EK-347AA-MG 
QZ-K19AA-OZ130 
EB-26115-46 
EY-3459E-DB 



Overview and Installation 



• Chapter 1, Overview 

• Chapter 2, Installation and Configuration 
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Overview 



This chapter describes the KA670 CPU module, MS670 memory module, and H3604 
console module. 

1.1 KA670 CPU Module 

The KA670 (Figure 1-1) is a quad-height VAX processor module for the Q22-bus. 
The KA670 is designed for use in high-speed, real-time applications and in multiuser, 
multitasking environments. The KA670 uses a cache memory to maximize performance. 

i- 




Figure 1-1 KA670 CPU Module 

The KA670 is used in the MicroVAX 4000-300 system, which is housed in the BA440 
enclosure. There are no jumpers or switches to configure. Fuses are located on the 
H3604 console module. 

The KA670 can be configured only as an arbiter CPU on the Q22-bus, where it arbitrates 
bus mastership and fields bus interrupt requests and any on-board interrupt requests. 
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The KA670 uses a 100-pin ribbon cable to communicate with the H3604 CPU console 
module. The module contains configuration switches, Ethernet and DSSI connectors, and 
a LED display. Section 1.7 describes the H3604 module. 

A single KA670 CPU module can support up to four MS670 memory modules. The KA670 
and MS670 modules mount in dedicated backplane slots in the BA440 enclosure. The 
KA670 CPU module communicates with the MS670 memory modules across a memory 
interconnect located on a 270-pin backplane connector. The backplane connector also 
connects the subsystem with the Q22-bus and one DSSI bus. Together,, the CPU and 
memory modules form a VAX subsystem that uses the DSSI bus to communicate with 
mass storage devices and the Q22-bus to communicate with I/O devices. Figure 1-2 is a 
block diagram of the subsystem major functions. 
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Figure 1-2 KA670 CPU Module Block DIagtBm 



1.1.1 Module Components 

The KA670 CPU is a quad-height module that mounts in a dedicated CPU backplane slot. 
The MS670 memory modules mount in four dedicated memory backplane slots. The CPU 
module is fingerless and uses a 270-pin high-density, right-angle connector to connect to 
the backplane. 

KA670 CPU module includes the following major hardware components. Figure 1-3 
shows chip locations, using the chip identification numbers. 

• DC520 (P-chip): VAX central processor with a 143 MHz clock 

• DC523 (F-chip): Floating point accelerator 

• DC592 (C-chip): Two-level cache and its bank of associated RAM chips 
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DC561 (G-chip): Main memory controller 

DC521: Clock 

DC527 (CQBIC): Q22-bus interface 

DC541 (SGEC): Ethernet interface 

DC542 (SHAG): DSSI interface chips (2) 

DC5H (SSC): System support chip 

DC509: Clock 

Two firmware ROMs: 256 kilobytes (Each is 128 kilobytes by 8.) 

100-pin connector to the H3604 console module 

270-pin connector to the backplane carrying signals for the Q22-bus, the DSSI bus, 
and the memory interconnect 
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Figure 1-3 KA670 CPU Module Component Side 

The KA670 CPU is designed for use in high-speed, real-time applications and in 
multiuser, multitasking environments. The KA670 CPU incorporates a two-level cache to 
maximize system performance. Estimated compute performance for the KA670-AA CPU 
is 8.0 times that of a VAX 11/780 system. 

Functionally, the KA670-AA CPU module is divided into four major areas: 

• Central processing subsystem 
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• System support subsystem 

• I/O subsystem 

• Main memory controller 

1.2 Central Processing Subsystem 

The central processing subsystem contains a CPU chip, a floating point accelerator (FPA) 
chip, the cache RAMs, and a cache controller chip. 

1.2.1 Central Processing Unit (P-Chip (DC520)) 

The CPU chip is the heart of the KA670 module. The CPU executes the 181 instructions 
in the Micro VAX chip subset of the VAX instruction set. It is implemented by the CPU 
chip (REX520, DC520), which is in a 224-pin surface-mount package. The CPU chip 
achieves a 28 ns microcyle at an operating frequency of 143 Mhz. The processor also 
supports full VAX memory management with demand paging and a 4 gjigabyte virtual 
address space. 

The central processor supports the MicroVAX instruction set with the following string 
instructions: 

CMPC3 

CMPC5 

LOCC 

SCANC 

SKPC 

SPANC 
The central processor provides the following subset of the VAX data types: 

Byte 

Word 

Longword 

Quadword 

Character string 

Variable-length bit field 

Absolute queues 

Self-relative queues 

F-floating 

G-floating 

D-floating 
Support for the remaining VAX data types can be provided through macrocode emulation. 
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1 .2.2 Floating Point Accelerator (F-Chip (DC523)) 

The floating point accelerator is implemented by the F-chip, which executes the VAX 
f_, d_, and g_ floating point instructions. The F-chip receives opcode information from 
the P-chip, and receives operands directly from memory or the P-chip. The result of the 
floating point is always returned to the P-chip. 

The floating point accelerator executes 61 floating point instructions and 2 longword- 
length integer multiply instructions in the VAX base instruction group. The F-chip is in 
a 224-pin surface moimt package. 

1.2.3 The Cache 

The KA670 processor module uses a two-level cache to maximize CPU performance. The 
first level is the primary cache, consisting of 2 kilobytes on the central processing chip 
(P-chip). The second level is the backup cache, consisting of 24 16K-by-4 static RAMs and 
a cache controller chip. 

The cache controller chip is implemented with the backup cache chip, (C-chip, DC592), 
which is in a 224-pin surface mount package. The C-chip contains the tag store and the 
control logic for the backup cache RAMs, as well as a copy of the primary cache tag store 
to guarantee primary cache coherence between memory and processor. The chip also 
provides an additional bus interface for invalidate filtering, to improve performance. 

1 .3 System Support Subsystem 

The system support subsystem handles the basic functions required to support the 
console in a system environment. This subsystem contains the system support chip 
(SSC), the firmware ROMs, the boot and diagnostic register, and the station address 
ROM. 

1 .3.1 System Support Chip (SSC (DC511)) 

The SSC chip is in an 84-pin CERQUAD* surface mount package. The SSC chip provides 
console and boot code support fimctions, operating system support functions, timers, and 
the following features: 

Word-wide ROM unpacking 

1 kilobyte of battery backed-up RAM 

Halt-arbitration logic 

Console serial line 

Interval timer with 10 ms interrupts 

VAX standard time-of-year clock with battery backup 

lORESET register 

Programmable CDAL bus timeout (CPU data/address lines) 

Two programmable timers 

A register to control the diagnostic LEDs 



* A ceramic -body device with leads on four sides. 
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1.3.2 Firmware ROMs 

Resident firmware ROM is on two 128 Kbyte by 8 EPROM chips. The firmware gains 
control when the CPU halts. The firmware contains programs that provide the following 
services: 

• Board initialization 

• Power-up self-testing of the KA670 and MS670 modules 

• Emulation of a subset of the VAX standard console (auto or manual bootstrap, auto or 
manual restart, and a simple command language for examining or altering the state 
of the processor) 

• Booting from supported Q22-bus devices 

• Multilingual translation of key system messages 
See Chapter 9 for details on KA670 firmware. 

1 .3.3 Boot and Diagnostic Register 

The boot and diagnostic register (BDR) allows the firmware and the operating system to 
read KA670 configuration bits. 

1.3.4 Station Address ROIM 

The station address ROM contains the network address of the system. This is 
implemented in a 32-byte by 8-bit ROM (6331). 

1.4 I/O Subsystem 

The I/O subsystem contains the following: 

• 2 DSSI mass storage interfaces 

• Ethernet interface 

• Q22-bus interface 

1 .4.1 DSSI Mass Storage Interface (SHAC (DC542)) 

The two single-host adapter chips (SHAC) implement the DSSI bus interfaces. One 
SHAC interfaces to the KA670 system console module, while the other SHAC interfaces 
to the KA670 backplane. The DSSI interface allows each DSSI bus on the KA670 to 
transmit packets of data to, and receive packets from, up to seven other DSSI devices. 
These devices include the RF-series integrated storage elements (ISEs), a KFQSA 
module, a second KA670 module, or a KA640 module. 

Each SHAC is in a 164-pin CERQUAD package. The SHAC facilitates scatter and gather 
mapping along with internal FIFO buffering. 

The DSSI bus improves system performance, because it has a higher transfer rate than 
the Q22-bus and it relieves the Q22-bus of disk traffic. The DSSI bus has eight data 
lines, one parity line, and eight control lines. The ISEs have built-in controllers, so many 
functions can be handled without host or adapter intervention. 
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1.4.2 Ethernet Interface (SGEC (DC541)) 

The Ethernet interface handles communications between the CPU module and other 
nodes on the Ethernet. The interface is implemented with the second generation 
Ethernet controller chip (SGEC, DC541) on-board network interface. Used in connection 
with the H3604 console module, the SGEC allows the KA670 to connect to either a 
ThinWire or standard Ethernet. The SGEC supports the Ethernet data link layer and 
the CP bus parity protection. The SGEC chip is in a 84 pin package. The chip facilitates 
scatter and gather mapping along with dual internal FIFO buffering. 

1 .4.3 Q22-bus Interface (CQBIC (DC527)) 

The KA670 includes a Q22-bus interface that allows communication between the 
KA670 and other devices on the bus. It is implemented with the CP bus to Q22-bus 
asynchronous adapter chip (CQBIC, DC527). The CQBIC is in a 132-pin CERQUAD 
surface mount package. The KA670 does not provide Q22-bus termination. The 
backplane provides the termination resistors. The Q22-bus interface supports the 
following functions: 

• Programmable and direct mapping functions 

• Masked and unmasked longword reads and writes from CPU to the Q22-bus memory 
and I/O space and to the interface registers 

• Up to 16-word, block mode writes from Q22-bus to main memory 

• Up to 2-word, block mode transfers between the CPU and Q22-bus devices 

• Transfers from CPU to local Q22-bus memory space 

1 .5 Memory Support Subsystem 

This subsystem provides support for the KA670 memory subsystem. The memory support 
subsystem contains a memory controller, a bus adapter, and a G-chip interface. 

1 .5.1 Memory Controller/Bus Adapter (G~Chlp (DC561)) 

The memory controller and bus adapter are implemented by the memory controller chip 
(G-chip, DC561). The G-chip is a dual-ported ECC memory controller and a bus adapter. 
As a memory controller, the G-chip controls transactions between the GMI, RDAL bus, 
and the CP bus. In addition, the G-chip is responsible for assisting with maintaining 
primary and backup cache coherency with the memory system. 

The G-chip controls commimication among the P-chip, the CQBIC, and the SGEC and 
SHAC chips. The G-chip controls and passes data to or from one, two, three, or four 
buffered memory modules. 

As a bus adapter, the G-chip controls transactions between the higher performance 
RDAL bus and the lower performance CP bus. The CP bus port to the G-chip provides a 
peripheral bus for direct memory access (DMA) by peripheral functions. The CP bus is a 
peripheral bus on the KA670 and does not support the P-chip on this system. 

The G-chip is in a 332-pin, high-performance tape package (HPTP). The tape package is 
a surface mountable chip carrier with 12.5 mil lead spacing. 
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1 .6 MS670 Memory Module 

The MS670-BA is a 32 Mbyte, double-sided board, with an access time of 100 ns in a 
39-bit-wide array (32 bits of data and 7 bits of error correction code) implemented with a 
1 Mbyte dynamic RAM in SOJ surface mount packages. 

The module moimts in a dedicated memory backplane slot. The module is fingerless 
and uses a 150-pin, high-density, right-angle connector to connect to the backplane. 
Figure 1-4 is a photograph of the MS670 memory module. 
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Figure 1-4 MS670 Memory Module 
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1.7 H3604 Console Module 

The H3604 console module (Figure 1-5) allows the KA670 CPU module to interface to a 
serial line console device, a DSSI bus, and the Ethernet. The H3604 is wide enough to 
cover the five slots dedicated to the KA670 and its four MS670 modules. Five adhesive 
tags are included for the user to name the modules in the respective slots. 
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Figure 1-5 H3604 Console Module (Front View) 

The H3604 module contains the following connectors to allow CPU communication: 

• A console serial line (with baud rate switch) 

• Two Ethernet connectors (with switch) 

• Two 50-ping DSSI connectors that allow daisy-chaining of one DSSI bus, terminators 
for both DSSI connectors, and two bus node ID plugs 

The H3604 module also has four feature selection switches: 

• Baud rate select switch for the serial console line 

• Power-up mode switch 

• Break enable/disable switch from the console keyboard | Break | key (default) or fOri] 0, 
depending on the state of SSCCR <15>. If used, {ari]|] must be reset after each halt 
action. If this switch is set to the enable position (1), the system does not autoboot on 
power-up. Instead, the system enters console I/O mode and displays the »> prompt. 

• Ethernet connector switch to selects the following: 

• A 15-conductor connector for a standard Ethernet cable 

• A male BNC connector for a ThinWire Ethernet coaxial cable 

LEDs indicate the selected connector and valid +12 Vdc for that connector. 
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In addition, the H3604 module contains the following features: 

Console serial line drivers and receivers 

Hexadecimal display 

Battery charger and low voltage detection 

25.6 kHz TOY clock oscillator 

-9 V dc/dc converter 

Ethernet serial transceiver chip (SIA) 

Fused current surge protection 

Inside the door of the H3604 module are a DSSI circuit fuse and two jumpers. The fuse 
prevents shorts from the accidental grounding of the DSSI cable power pin. The jumpers 
must be in place to give the bus node number 7 to both of the SHAG DSSI bus controllers 
on the CPU board. (The two DSSI buses are separate.) 

There are two connectors from the H3604 module to the internal BA440. One is a 4-pin 
power connection to a small printed circuit card that inserts next to the KA670 CPU in 
the backplane. The other is the 100-pin connector to the KA670 CPU module. 



2 

Installation and Configuration 



This chapter describes how to install the KA670 in a system. The chapter discusses the 
following topics: 

• Installing the KA670 and MS670 modules 

• Configuring the KA670 

• KA670 connectors 

2.1 Installing the KA670 and MS670 Memory Modules 

NOTE 

You can use the KA670 and MS670 modules only in BA440 system enclosures 

that use high-density backplane connector slots. 

The KA670 CPU module and the MS670 memory modules must be installed in the five 
rightmost backplane slots. Note that the KA670 module installs in backplane slot J5, 
and the memory modules install in slots J4 through Jl. 

To install the KA670 and MS670 modules: 

1. Install the KA670 CPU in slot J5 of the Q22-bus/CD backplane. 

2. Install MS670 memory modules in slots J4 through Jl next to to the KA670 CPU. 

• If you only use one memory module , you can install it in any of the slots J4 
through Jl. 

• If you use more than one memory module, you must install the first memory 
module in J4, the second in J3, and so on. Do not leave a gap between memory 
modules. 

3. Install a 100-pin ribbon cable between the KA670 CPU and the console module. 

Figure 2-1 shows the positions of the KA670 CPU and the memory modules in the 
backplane. 
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Figure 2-1 Backplane 



2.2 Module Configuration and Naming 

Each module in a system must use a unique device address and interntpt vector. The 
device address is also known as the control and status register (CSR) a.ddress. Most 
modules have switches or jumpers for setting the CSR address and interrupt vector 
values. The value of a floating address depends on what other modules are housed in the 
system. 

Set CSR addresses and interrupt vectors for a module as follows: 

1. Determine the correct values for the module with the CONFIGURE command at the 
console I/O prompt (>»). The CONFIG utility eliminates the need to boot the VMS 
operating system to determine CSRs and interrupt vectors. Enter the CONFIGURE 
command, then HELP for the list of supported devices: 
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2. 



»> CONFIG 

Enter device configuration, HELP, or EXIT 
Device, Number? HEIf 
Devices : 



LPVll 


KXJll 


DLVllJ 


DZQll 


DZVll 


DFAOl 


RLV21 


TSV05 


RXV21 


DRVllW 


DRVllB 


DPVll 


DMVll 


DELQA 


DEQNA 


RQDX3 


KDA50 


RRD50 


RQC25 


KXXXX-DISK 


TQK50 


TQK7 


TU81E 


RV20 


KXXXX-TAPE 


KMVll 


lEQll 


DHQll 


DHVll 


CXA16 


CXB16 


CXY08 


VCB02 


QDSS 


DRVllJ 


DRQ3B 


VSV21 


IBQOl 


IDVllA 


IDVllB 


IDVllC 


IDVllD 


lAVllA 


lAVllB 


MIRA 


ADQ32 


DTC04 


DESQA 


IGQll 













The LPVll-SA has two sets of CSR address and interrupt vectors. To determine 
the correct values for an LPVll-SA, enter LPV11,2 at the DEVICE prompt for one 
LPVll-SA, or enter LPV11,4 for two LPVll-SA modules. 

See the KA670 CPU System Maintenance Manual for switch settings and CSR and 
interrupt vector jumper settings for supported options. 



2.3 Mass Storage Configuration 

There is space for four mass storage devices — either three integrated storage elements 
(ISEs) and one TK70 tape drive, or four ISEs. The ISEs are part of the Digital storage 
system interconnect (DSSI) bus. 

The DSSI bus is part of the backplane. The ISEs are of the RF series, and they plug into 
the backplane to become part of the bus. Each ISE must have its own unique DSSI node 
ID. The ISE receives its node ID from a plug on the operator control panel (OCP) on the 
front panel. 

The VMS operating system creates DSSI disk device names according to the following 
scheme: 

nodename $ DIA unit number 

For example, 

SUSANSDIAS 

You can use the device name for booting, as follows: 

>» BOOT S0SAN$DIA3 

You can access local programs in the RF-series ISE through the MicroVAX diagnostic 
monitor (MDM), or through the VMS operating system (version 5.0) and console I/O 
mode SET HOST/DUP command. This command creates a virtual terminal connection 
to the storage device and the designated local program using the diagnostic and utilities 
protocol (DUP) standard dialog. Section 2.3.3 describes the procedure for accessing DUP 
through the VMS operating system. 



2.3.1 Changing the Node Name 

Each ISE has a node name that is maintained in EPROM onboard the controller module. 
This node name is determined in manufacturing from an algorithm based on the drive 
serial number. You can change the node name of the DSSI device to something more 
meaningful by following the procedure in Example 2-1. In the example, the node name 
for the ISE at DSSI node address 1 is changed from R3YBNE to DATADISK. 
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>» SHO DSSI 

DSSI Node (MDC) 
-DIAO (RF71) 

DSSI Node 1 (R3YBNE) !The node name for this drive will be 
-DIM (RF71) ! changed from R3YBNE to DATADISK. 

DSSI Node 7 (*) 

>» 

>» SET HOST/DDP/DSSI 1 

Starting DUP server. . . 

Copyright 1988 Digital Equipment Corporation 

DRVEXR VI. D 5-NOV-1988 15:33:06 

DRVTST VI. D 5-NOV-1988 15:33:06 

HISTRY VI. D 5-NOV-1988 15:33:06 

ERASE VI. D 5-NOV-1988 15:33:06 

PARAMS VI. D 5-NOV-1988 15:33:06 

DIRECT VI. D 5-NOV-1988 15:33:06 

End of directory 

Task Name? params 

Copyright 1988 Digital Equipment Corporation 

PARAMS> SHO NODENAHE 

Parameter Current Default Type Radix 

NODENAME R3YBNE RF71 String Ascii B 

PARAMS> SET NODEKAME DATADISK 

PARAMS> WRITE !This command writes the change 

!to EEPROM. 
Changes require controller initialization, ok? [Y/ (N) ) Y 

Stopping DUP server. . . 
>» SHO DSSI 
DSSI Node (MDC) 
-DIAO (RF71) 

DSSI Node 1 (DATADISK) !The node name has changed from 
-DIAl (RF71) !R3YBNE to DATADISK. 

DSSI Node 7 (*) 

Example 2-1 Changing a DSSI Node Name 
2.3.2 Changing the DSSi Unit Number 

By default, the ISE drive assigns the disk's unit number to the same value as the DSSI 
node address for that drive. 

Example 2-2 shows how to change the unit number of a DSSI device. This example 
changes the unit number for the RF71 drive at DSSI node address 2 from 1 to 50 
(decimal). You must change two parameters: UNITNUM and FORCEUlSfl. Changing 
these parameters overrides the default, which assigns the unit number tliie same value as 
the node address. 
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DRVEXR 


VI, 


.0 


D 


DBVTST 


Vi, 


,0 


D 


HISTRY 


VI, 


.0 


D 


ERASE 


VI, 


.0 


D 


PARAMS 


VI, 


,0 


D 


DIRECT 


VI, 


.0 


D 


End of 


directory 



>» SHO DSSI 

DSSI Node (MDC) 
-DIAO (RF71) 

DSSI Node 1 (R3QJNE) 'The unit number for this drive will be 
-DIAl (RF71) Ichanged from I to 50 (DIAl to DIA50) . 

DSSI Node 7 (*) 

»> 

>» SET HOST/DDP/DSSI 1 

Starting DUP server. . . 

Copyright 1988 Digital Equipment Corporation 

5-NOV-1988 15:33:06 

5-NOV-1988 15:33:06 

5-NOV-1988 15:33:06 

5-NOV-1988 15:33:06 

5-NOV-1988 15:33:06 

5-NOV-1988 15:33:06 



Task Name? PARAMS 

Copyright 1988 Digital Equipment Corporation 

PARAMS> SHO ONITNUM 

Parameter Current Default Type Radix 

UNITNUM C Word Dec U 

PARAMS > SHO FORCEDNI 

Parameter Current Default Type Radix 

FORCEUNI 1 1 Boolean 0/1 V 

PARAMS> SET ONITNOM 50 

PARAMS > SET FORCEONI 

PARAMS> WRITE !This command writes the changes to EEPROM. 

PARAMS> EX 
Exiting. . . 

Task Name? 

Stopping DUP server... 

>» 

»>SHO DSSI 

DSSI Node (MDC) 
-DIAO (RF71) 

DSSI Node 1 (R3QJNE) 'The unit number has changed 

-DIA50 (RF71) !and the node ID remains at 1. 

DSSI Node 7 (*) 

Example 2-2 Changing a DSSI Unit Number 

2.3.3 Accessing RF-series Firmware in VMS, Through DUP 

You can also access the RF-series ISE firmware utilities from the VMS operating system 
as well as through the console commands. 

Use the VMS operating system to access the ISE firmware if you want to look up or view 
parameter settings, but not change them. To change ISE parameter settings, enter the 
ISE firmware through the console I/O mode SET HOST/DUP command. 
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Load the FYDRIVER using the following commands in SYSGEN: 

$ MCR SYSGEM 

SYSGEN> LOAD FYDRIVER/NOADAPTER 

SYSGEN> CONNECT FYAO/NOADAPTER 

SYSGEN> EXIT 

$ 

You can then access the ISE firmware utilities by using the following VIMS command: 
$ SET HOST/DUP/SERVER=USCP$DUP/TASK-PAItAMS nodonama 

2.3.3.1 Allocation Class 

When a KA670 system containing ISEs is configured in a cluster, either as a boot node or 
a satellite node, you must assign the allocation class in VMS SYSGEN and for the ISE 
matching nonzero values. To change the allocation class of the ISE, use the following 
commands: 

>» SET HOST/DOP/DSSI <DSSI node number> PAIUIMS 
Starting DOP server. . 

PARAMS> SET AZJX:iiASS <allocation class value> 

P ARAMS > WRITE 

Changes require controller initialization, ok? [Y/N] Y 

Stopping DUP server. . 
>» 

2.4 DSSi Cabling, Device Identity, and Bus Termination 

The ISEs in one particular BA440 enclosure are connected to the system backplane 
and communicate internally over the backplane. There are no internal DSSI cables. 
Externally, a 50-pin ribbon cable connects the DSSI bus to other devices, either hosts or 
expanders. 

There are two DSSI ports in the KA670 system. One DSSI port is routed along the 
backplane and exits the enclosure at the left edge, from a connector near the ISE slots. 
The other DSSI port is configured by means of the DSSI connector on the H3604 panel. 
If unused, DSSI connectors must be terminated. 

There is no terminator on the KA670. The near-end termination is contained on the 
backplane for the internal DSSI bus, and provided by the pluggable connectors for the 
external bus. 

All DSSI devices on the same bus must have unique identifiers. On the face of the H3604 
console module, you can see the two DSSI bus ID plugs (Figure 1-5). These ID plugs 
provide an identity for each DSSI bus. Because the DSSI buses are separate, the two ID 
plugs may be identical. 

2.5 KA670 Connectors 

The KA670 CPU module uses two connectors, Jl and J2. Jl is a 270-pin connector that 
mates with the backplane. J2 is the connector for the 100-pin ribbon cable that goes 
to the console module. Users configure the KA670 through the H3604 console module. 
Figure 1-3 shows the location of the connectors on the KA670 module. 
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This chapter describes the functions of the central processing unit (P-chip) and the 
floating point unit (F-chip). 

3.1 Central Processor 

The central processor of the KA670 supports the MicroVAX chip subset (plus six 
additional string instructions) of the VAX instruction set and data types, as well as 
full VAX memory management. The central processor is implemented with a single VLSI 
chip called the P-chip (REX520). 

3.1.1 Processor State 

The processor state is that portion of the state of a process which is stored in processor 
registers rather than in memory. The processor state is composed of 16 general-purpose 
registers (GPRs), the processor status longword (PSL), and the internal processor 
registers (IPRs). 

Nonprivileged software can access the GPRs and the processor status word (bits <15:00> 
of the PSL). Only privileged software can access the IPRs and bits <31:16> of the PSL. 
The IPRs are explicitly accessible only by the move to processor register (MTPR) and 
move from processor register (MFPR) instructions, which can be executed only while 
running in kernel mode. 

3.1.1.1 General-Purpose Registers 

The KA670 implements 16 general-purpose registers as specified in the VAX Architecture 
Reference Manual. These registers are used for temporary storage, accumulators, and as 
base and index registers for addressing. The general-purpose registers are RO to R15. 
The bits of a register are numbered from the right, <0> to <31>. Figure 3-1 shows the 
format of a general-purpose register. Table 3-1 describes the registers. 

3 

1 



Figure 3-1 General-Purpose Register 

Some of these registers have been assigned special meaning by the VAX-11 architecture: 
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Table S-1 General-Purpose Register Descriptions 



Register Register Name 



Mnemonic Description 



R15 


Program counter 


PC 


R14 


Stack pointer 


SP 


R13 


Frame pointer 


FP 



R12 



Argument pointer 



AP 



The PC contains the address of the next 
instruction byte of the program. 

The SP contains the address of the top of 
the processor-defined stack. 

The VAX-11 procedure call convention 
builds a data structure on the stack, 
called a stack frame. The FP contains 
the address of the base of this data 
structure. 

The VAX-11 procedure call convention 
uses a data structure termed an 
argument. The AP contains the address 
of the base of this data structure. 



Consult the VAX Architecture Reference Manual for more information on the operation 
and use of these registers. 

3.1.1.2 Processor Status Longword 

The KA670 processor status longword (PSL) is implemented as specified in the VAX 
Architecture Reference Manual . See that manual for a detailed description of this 
register's operation. 

The PSL is saved on the stack when an exception or interrupt occurs, and is saved in 
the process control block (PCB) on a process context switch. Nonprivileged software 
can access bits <15:00>, but only privileged software can access bits <31:16>. Processor 
initialization sets the PSL to 041F OOOOie. Figure 3-2 shows the format of the processor 
status longword. Table 3-2 lists the bits and definitions. 



3 32222222222 
109876543210 



1 1 
6 5 



87 6 543210 









F 








M 






" 


■"■" 


■^~" 


"■^ 


■^^ 


^^~ 




^^ 


c 


T 




P 


1 


CUR 


PRV 


B 






D 


F 


1 












M 


P 


MBZ 





s 


MOD 


MOD 


Z 


IPL 


MBZ 


V 


U 


V 


T 


N 


Z 


V 


c 



Figure 3-2 Processor Status Longword 

NOTE 

VAX compatibility mode instructions can be emulated by macrocode, but the 

emulation software runs in native mode, so the CM bit is never set. 

Table 3-2 explains the properties of each internal process register: 
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Table 3-2 Internal Process Register Descriptions 



PSL 

Data 

Bit 



Name 



Definition 



<31> CM Compatibility mode. This bit always reads as zero, loading a one into this 

bit is a NOP. 



<30> 


TP 


Trace pending 


<29:28> 


MBZ 


Must be written as zero 


<27> 


FPD 


First part done 


<26> 


IS 


Interrupt stack 


<25:24> 


CUR 


Current mode 


<23:22> 


PRV 


Previous mode 


<21> 


MBZ 


Must be written as zero 


<20:16> 


IPL 


Interrupt priority level 


<15:8> 


MBZ 


Must be written as zero 


<7> 


DV 


Decimal overflow trap enable T! 
hardware; the bit can be used b 
instructions. 


<6> 


FU 


Floating underflow fault enable 


<5> 


rv 


Integer overflow trap enable 


<4> 


T 


Trace trap enable 


<3> 


N 


Negative condition code 


<2> 


z 


Zero condition code 


<1> 


V 


Overflow condition code 


<0> 


c 


Carry condition code 



3.1.1.3 Internal Processor Registers 

The KA670 internal processor registers (IPRs) can be accessed by using the MFPR and 
MTPR privileged instructions. Each IPR falls into one of the following five categories: 

1. Implemented by KA670 as specified in the VAX Architecture Reference Manual . 

2. P-chip implementation that is unique or different from that specified in the VAX 
Architecture Reference Manual. 

3. Not implemented by KA670. Read as zero, NOP on writes. 

4. Not implemented by KA670. Access causes a reserved operand fault. 

5. Not fully implemented by KA670. Access causes unpredictable results. 

Table 3-3 provides information on each IPR. 

There are different categories of IPRs. Section 3.1.1.3.1 lists category 1 IPRs and the 
section where they are described. Section 3.1.1.3.2 lists category 2 IPRs and the section 
where they are described. 
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Table 3-3 KA670 Internal Processor Registers 



Decimal 


Hex. 


Register Name 


Mnemonic Type 


Scope 


Impl. 


Init? Category 








Kernel stack 
pointer 


KSP 


RW 


PROC 


REX520 




1 


1 


Executive stack 
pointer 


ESP 


RW 


PROC 


REX520 




2 


2 


Supervisor stack 
pointer 


SSP 


RW 


PROC 


REX620 




3 


3 


User stack pointer 


USP 


RW 


PROC 


REX520 




4 


4 


Interrupt stack 
pointer 


ISP 


RW 


CPU 


REX520 




B-7 


5-7 


Reserved 












8 


8 


PC base register 


POBR 


RW 


PROC 


REX520 




9 


9 


PO length register 


POLR 


RW 


PROC 


REX520 




10 


A 


PI base register 


PIER 


RW 


PROC 


REX620 




11 


B 


1 length register 


PILR 


RW 


PROC 


REX520 




12 


C 


System base 
register 


SBR 


RW 


CPU 


REX620 




13 


D 


System length 
register 


SLR 


RW 


CPU 


REX520 




14-15 


E-F 


Reserved 












16 


10 


Process control 
block base 


PCBB 


RW 


PROC 


REX520 




17 


11 


System control 
block base 


SCBB 


RW 


CPU 


REX520 




18 


12 


Interrupt priority 
level 


IPL 


RW 


CPU 


REX520 


Yes 1 


19 


13 


AST level 


ASTLVL 


RW 


PROC 


REX520 


Yes 1 


20 


14 


Software 
interrupt request 
register 


SIRR 


W 


CPU 


REX620 





Type 

R — ^Read-only register 
W — Write-only register 
RW— Read/write register 
Scope —Processor register's scope 

CPU —CPU-wide register 
PROC — ^Per-process register 
Impl. —Chip in which the processor register is implemented. 

REX520 — REX620 chip (P-chip) 

SSC —System support chip 

C-chip — -C-chip 
Init? —Initialized on module RESET (power-up, or negation of DCOK) 
Category— Processor register category 
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Table 3-3 (Com.) KA670 Internal Processor Registers 



Decimal 


Hex. 


Register Name 


Mnemonic lype Scope 


ImpL 


but? 


Category 


21 


15 


Software 
interrupt 
summary register 


SISR 


RW 


CPU 


REX620 


Yes 


1 


22-23 


16-17 


Reserved 












3 


24 


18 


Interval counter 
control status 


ICCS 


RW 


CPU 


REX520 




2 


25-26 


19- lA 


Reserved 












3 


27 


IB 


Time-of-year 
register 


TODR 


RW 


CPU 


SSC 




1 


28 


IC 


Console storage 
receiver status 


GSRS 


RW 


CPU 


SSC 


Yes 


5 


29 


ID 


Console storage 
receiver data 


CSRD 


R 


CPU 


SSC 


Yes 


5 


30 


IE 


Console storage 
transmitter status 


CSTS 


RW 


CPU 


SSC 


Yes 


5 


31 


IF 


Console storage 
transmitter data 


CSTD 


W 


CPU 


SSC 


Yes 


5 


32 


20 


Console receiver 
control/status 


RXCS 


RW 


CPU 


SSC 


Yes 


2 


33 


21 


Console receiver 
data buffer 


RXDB 


R 


CPU 


SSC 


Yes 


2 


34 


22 


Console transfer 
control/status 


TXCS 


RW 


CPU 


SSC 


Yes 


2 


35 


23 


Console transfer 
data buffer 


TXDB 


W 


CPU 


SSC 


Yes 


2 


36-37 


24-25 


Reserved 












3 


38 


26 


Machine check 
error register 


MCESR 


W 


CPU 


REX520 




2 


39 


27 


Reserved 












3 


40 


28 


Accelerator 
control and status 
register 


ACCS 


RW 


CPU 


REXS20 


Yes 


2 



Type 

R — Read-only register 
W — ^Write-only register 
RW — Read/write register 
Scope — ^Processor register's scope 

CPU —CPU-wide register 
PROC — Per-process register 
Impl. — Chip in which the processor register is implemented. 

REX520 — REX520 chip (P-chip) 

SSC — System support chip 

C-chip — -C-chip 
Init? — Initialized on module RESET (power-up, or negation of DCOK) 
Category — ^Processor register category 
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Table 3-3 (Com.) KA670 Internal Processor Registers 

Decimal Hex. Register Name Mnemonic lype Scope Impl. Init? Category 



41 


29 


Reserved 








42 


2A 


Console saved PC 


SAVPC 


R 


CPU 


43 


2B 


Console saved 
PSL 


SAVFSL 


R 


CPU 


44-46 


2C-2E 


Reserved 








47 


2F 


Translation buffer 
tag 


TBTAG 


W 


CPU 


48-54 


30-36 


Reserved 








56 


37 


I/O system reset 
register 


lORESET 


W 


CPU 


66 


38 


Memory 

management 

enable 


MAPEN 


RW 


CPU 


57 


39 


Translation bufler 
invalidate all 


TBIA 


W 


CPU 


58 


3A 


Translation buffer 
invalidate single 


TBIS 


W 


CPU 


59 


3B 


Translation buffer 
data 


TBDATA 


W 


CPU 


60-61 


3C-3D 


Reserved 








62 


3E 


System 
identification 


SID 


R 


CPU 


63 


3F 


Translation buffer 
check 


TBCHK 


W 


CPU 


64-111 


40-6F 


Reserved 








112 


70 


Backup cache 
reserved register 


BC112 


RW 


CPU 


113 


71 


Backup cache tag 
store 


BCBTS 


RW 


CPU 


114 


72 


Backup cache PI 
tag store 


BCPITS 


RW 


CPU 



REX620 
REX520 

REX520 

SSC 
REX520 

REX520 
REX520 
REX&20 

RBX520 
REX520 

C-chip 
C-Chip 
C-Chip 



Yes 



3 
2 
2 

3 
2 

3 
2 



Type 

R — ^Read-only register 
W — ^Writ«-only register 
RW — Read/write register 
Scope — ^Processor register's scope 

CPU —CPU-wide register 
PROC — Per-process register 
Impl. — Chip in which the processor register is implemented. 

REX520 — REX520 chip (P-chip) 

SSC — System support chip 

C-chip — C-chip 
Init? —Initialized on module RESET (power-up, or negation of DCOK) 
Category — ^Processor register category 
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Table 3-3 (Cent.) KA670 Internal Processor Registers 



Decimal Hex. Register Name Mnemonic IVpe Scope ImpL Init? Category 



115 


73 


Backup cache P2 

tag store 


BCP2TS 


RW 


CPU 


C-Chip 


2 


116 


74 


Backup cache 
refresh register 


BCRFR 


RW 


CPU 


C-Chip 


2 


117 


75 


Backup cache 
index register 


BCIDX 


RW 


CPU 


C-Chip 


2 


118 


76 


Backup cache 
status register 


BCSTS , 


RW 


CPU 


C-Chip Yes 


2 


119 


77 


Backup cache 
control register 


BCCTL 


RW 


CPU 


C-Chip Yes 


2 


120 


78 


Backup cache 
error register 


BCERR 

! 


R 


CPU 


C-Chip 


2 


121 


79 


Backup cache 
flush backup tag 
store 


BCFBTS 


W 


CPU 


C-Chip 


2 


122 


7A 


Backup cache 
flush primary tag 
store 


BCFPTSj 


W 


CPU 


C-Chip 


2 


123 


7B 


Vector interface 
error status 
register 


VINTSR 


RW 


CPU 


C-Chip 


2 


124 


7C 


Primary cache tag 
store 


PCTAG 


RW 


CPU 


REX520 


2 


125 


7D 


FVimary cache 
index register 


PCIDX 


RW 


CPU 


REX520 


2 


126 


7E 


Primaiy cache 
error address 
register 


PCERR 


RW 


CPU 


REX520 


2 


127 


7F 


Primaiy cache 
status register 


POSTS 


RW 


CPU 


REX520 Yea 


2 


128- 
255 


80-FF 


Reserved 










3 


>255 


>FF 


Reserved 










4 



Type 

R — ^Read-only register 
W —Write-only register 
RW— Read/>write register 
Scope — ^Processor register's scope 

CPU —CPU-wide register 
PROC — Per-process register 
Impl. — Chip in which the processor register is implemented. 

REX520 — REX520 chip (P-chip) 

SSC — System support chip 

C-chip — C-chip 
Init? —Initialized on module RESET (power-up, or negation of DCOK) 
Category — ^Processor register category 
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ACCESS TO CATEGORY 3 REGISTERS 

Category 3 processor registers in the previous table are passed to the RDAL by 
the P-chip. Since these registers are not implemented by the K^i670 module, the 
SSC terminates the EPR read or write transaction after the period specified by 
the SSC bus timeout control register. 

During this time, the CPU does not execute any other instructions, and no other 
DAL transactions are possible. Therefore, category 3 processor registers should 
not be referenced diunng normal system operation, as this may icause device or 
CPU timeouts to occur. 

3.1.1.3.1 KA670 VAX Standard Internal Processor Registers 

Internal Processor Registers (IPRs) that are implemented as specified in the VAX 
Architecture Reference Manual are classified as category 1 IPRs. See the VAX Architecture 
Reference Manual for details on the operation and use of these registers. 

The category 1 registers listed in Table 3—4 are also referenced in other sections of this 
manual: 



Table 3-4 Category 1 Internal Processor Registers 



Number 








Decimal 


Hex 


Register Name 


Mnemonic 


Section 


18 


12 


Interrupt priority level 


IPL 


3.i.6.:i 


20 


14 


Software interrupt request 


SIRR 


3.1.6.1 


21 


15 


Software interrupt 
summary 


SISR 


3.1.6.1 


27 


IB 


Time-of-year clock 


TODR 


Section 5.2 


56 


38 


Memory management 
enable 


MAPEN 


3.1.5.2 


57 


39 


Translation buffer 
invalidate all 


TBIA 


3.1.5.2 


58 


3A 


Translation buffer 
invalidate single 


TBIS 


3.1.5.2 


62 


3E 


System identification 


SID 


Section 3.1.7 


63 


3F 


Translation buffer check 


TBCHK 


3.1.5.2 



3.1.1.3.2 KA670 Unique internal Processor Registers 

Internal processor registers (IPRs) that are implemented uniquely on the KA670 are 
classified as category two IPRs. For example, category 2 IPRs are not contained in, or 
do not fully conform to, the VAX Architecture Reference Manual. Category 2 IPRs are 
described in detail in this manual. See the sections listed in Table 3-5 for a description 
of these registers: 
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Table 3-5 Category 2 Internal Processor Rcigisters 



Number 
Decimal Hex 



Register Name 



Mnemonic 



Section 



24 


18 


32 


20 


33 


21 


34 


22 


35 


23 


38 


26 


40 


28 


42 


2A 


43 


2B 


47 


2F 


55 


37 


59 


3B 


113 


71 


114 


72 


115 


73 


116 


74 


117 


75 


118 


76 


119 


77 


120 


78 


121 


79 


122 


7A 


123 


7B 


124 


7C 


125 


7D 


126 


7E 


127 


7F 



Interval clock control/status 
Console receiver control/Status 
Console receiver data buffer 
Console transmit control/status 
Console transmit data buffer 
Machine check error register 
Accelerator control suid status 
Console saved PC 
Console saved PSL 
Translation buffer tag 
I/O system reset register 
Translation buffer data 
Backup cache tag store 
Backup cache PI tag store 
Backup cache P2 tag store I 

Backup cache refresh register 
Backup cache index register 
Backup cache status register 
Backup cache control register 
Backup cache error register 
Backup cache flush badcup tag 0tore 
Backup cache flush primary tag store 
Vector interface error status register 

Primary cache tag store 

I 

Primary cache index register 
Primaiy cache error address re^^ster 
Primary cache status register 



ICCS 


5.2.2 


RXCS 


5.1.1.1 


RXDB 


5.1.1.2 


TXCS 


5.1.1.3 


TXDB 


5.1.1.4 


MCESR 


3.1.6.4 


ACCS 


3.1.8 


SAVPC 


3.1.6.6 


SAVPSL 


3.1.6.6 


TBTAG 


3.1.5.2 


lORESET 


6.5.3.1 


TBDATA 


3.1.5.2 


BCBTS 


4.1.3.5.1 


BCPITS 


4.1.3.5.2 


BCP2TS 


4.1.3.5.2 


BCRFR 


4.1.3.5.3 


BCIDX 


4.1.3.5.4 


BCSTS 


4.1.3.5.5 


BCCTL 


4.1.3.5.6 


BCERR 


4.1.3.6.1 


BCFBTS 


4.1.3.6.2 


BCFPTS 


4.1.3.6.3 


VINTSR 


- 


PCTAG 


4.1.2.5.4 


PCIDX 


4.1.2.6.3 


PCERR 


4.1.2.5.2 


PCSTS 


4.1.2.5.1 



3.1.2 Process Structure 

A process is a single thread of execution. The context of the current process is contained 
in the process control block (FOB), which is Ipointed to by the process control block 
base register (PCBB). The KA670 implemenis these structures as defined in the VAX 
Architecture Reference Manual. See that manual for a description of the PCB and the 
PCBB. 
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3.1.3 Data Types 

The KA670 CPU supports the following subset of the VAX data types: 

Byte 

Word 

Longword 

Quadword 

Character string 

Variable-length bit field 

Absolute queues 

Self-relative queues 

F_floating 

G_floating 

D_floating 
Support for the remaining VAX data types can be provided by macrocode emulation. 

3.1.4 Instruction Set 

The KA670 CPU implements the following subset of the VAX instruction set types in 
microcode: 

• Integer arithmetic and logical 

• Address 

• Variable length bit field 

• Control 

• Procedure call 

• Miscellaneous 

• Queue * 

• Character string (M0VC3, M0VC5, CMPC3*, CMPC5*, LOCC*. SCANC*. SKPC*. 

SPANC) 

• Operating system support 

• F_floating 

• G_floating 

• D_floating 

The P-chip (REX520) provides special microcode assistance to aid the macrocode 
emulation of the following instruction groups: 

• Character string (except M0VC3, M0VC5, CMPC3*, CMPC5*, LOCO*, SCANC*. 
SKPC*, SPANC*) 

• Decimal string 



These instructions were in the microcode-assisted category on the KA630-A (MicroVAX 11) and 
therefore had to be emulated. 
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• CRC 

• EDITPC 

The following instruction groups are not implemented, but may be emulated by 
macrocode: 

• Octaword 

• Compatibility mode instructions 

Appendix D lists the entire KA670 instruction set. The appendix indicating which 
mstructions are implemented in the floating point accelerator (FPA) and which 
instructions have microcode assists to speed up macrocode emulation. 

3.1.5 Memory Management 

The KA670 implements VAX Memory Management in full, as defined in the VAX 
Architecture Reference Manual. System space addresses are virtually mapped through 
smgle-level page tables, and process space addresses are virtually mapped through two- 
level page tables. See the VAX Architecture Reference Manual for descriptions of the 
virtual-to-physical address translation process, and the format for VAX page table entries 
(PTEs). 

3.1.5.1 Translation Buffer 

To reduce the overhead associated with translating virtual addresses to physical 
addresses, the P-chip employs a 64-entry, fully associative, translation buffer for caching 
VAX PTEs. Each entry can store a PTE for translating virtual addresses in either the 
VAX process space, or VAX system space. The translation buffer is flushed whenever the 
following actions are performed: 

• Memory management is enabled or disabled (for example, by writes to IPR 56). 

• Any page table base or length registers are modified (for example, by writes to IPRs 

lu to o). 

• IPR 57 (TBIA) or IPR 58 (TBIS) is written to. 

Each entry is divided into two parts— a 24-bit tag register and a 27-bit PTE register. 
The tag register stores the virtual page number (VPN) of the virtual page that the 
corresponding PTE Register maps, and a valid bit (TB.V) that indicates the tag contains 
a valid VPN. The PTE register stores the 21-bit page frame number (PEN) field, the 
PTE.V bit, the PTE.M bit, and the 4-bit PROT field from the corresponding VAX PTE. 

During virtual-to-physical address translation, the contents of the 64 tag registers are 
compared with the virtual page number field (bits <31:9>) of the virtual address of the 
reference. If there is a match with one of the tag registers and the TB.V bit indicates 
the entry is valid, then a translation buffer "hit" has occurred. The contents of the 
corresponding PTE register are used for the translation. 

If there is no match, the translation buffer does not contain the necessary VAX PTE 
information to translate the address of the reference, and the PTE must be fetched 
from memory. Upon fetching the PTE, the translation buffer is updated by replacing 
the entiy selected by the replacement pointer.; Since this pointer is moved to the next 
sequential translation buffer entry whenever it is pointing to an entry that is accessed, 
the replacement algorithm is not last used (NLU). This pointer is called the NLU pointer. 
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3.1.5.2 Memory Management Control Registers 

There are four IPRs that control the memory management unit (MMU): 

IPR 56 (MAPEN) 
IPR 57 (TBIA) 
IPR 58 (TBIS) 
IPR 63 (TBCHK) 

Memory management can be enabled or disabled through IPR 56 (M/>lPEN). Writing a 
to this register with a MTPR instruction disables memory management. Writing a 1 
to this register with a MTPR instruction enables memory management. Writes to this 
register flush the translation buffer. To determine whether or not memory management 
is enabled, IPR 56 is read using the MFPR instruction. 

Translation buffer entries that map a particular virtual address can be invalidated by 
writing the virtual address to IPR 58 (TBIS), using the MTPR instruction. Whenever 
software changes (1) a valid page table entry for the system or current process region, 
or (2) a system page table entry that maps any part of the current process page table, 
all process pages mapped by the page table entry must be invalidated in the translation 
buffer. 

The entire translation buffer can be invalidated by writing a to IPR 57 (TBIA) using 
the MTPR instruction. 

The translation buffer can be checked to see if it contains a valid translation for a 
particular virtual page, by using the MTPR instruction to write a virtual address within 
that page to IPR 63 (TBCHK) . If the translation buffer conl^ains a valid translation 
for the page, the condition code V bit (bit<l> of the PSD is set. The TBIS, TBIA, and 
TBCHK IPRs are write only. The operation of an MFPR instruction from any of these 
registers is undefined. 

There are three pairs of base and length registers that specify the base and length of the 
PO, PI, and SO spaces: 

• IPR 8 (POBR) and IPR 9 (POLR) 

• IPR 10 (PIBR) and IPR 11 (PlLR) 

• IPR 12 (SBR) and IPR 13 (SLR) 

The base and length of the PO, PI, and SO page tables may be changed by writing the 
appropriate address or length to any of the following registers: 



IPR 8 (POBR) 
IPR 9 (POLR) 
IPR 10 (PIBR) 
IPR 11 (PlLR) 
IPR 12 (SBR) 
IPR 13 (SLR) 

Whenever the location or size of the system map is changed by changing the SBR 
(IPR 12) or SLR (IPR 13), the entire translation buffer must be cleared. The P-chip 
accomplishes this by flushing the TB on any change to SBR and SLR,, or to POBR, PIBR, 
POLR, and PlLR. 

When a process context is loaded with the LDPCTX instruction, all TB entries that map 
process-space pages are automatically cleared. System-space mappings are preserved. 
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Two IPRs are used by diagnostic software to test the translation buffer: 

IPR 47 (TBTAG)(Format shown in Figure 3-3.) 
IPR 59 (TBDATA)(Format shown in Figure 3-4.) 



9 8 



Virtual Page Number (Write Only) 


MBZ 



TBTAG 



Figure 3-3 Translation Buffer Tag (TBTAG)— <IPR 47^o SFis) 



3 3 
1 


2 : 

7 ( 


I 2 2 
5 5 1 


2 






MBZ 


PTE.PFN (Write Only) 


1 . 1 


i / 


— PTE.M 


(Write Only) 

OT (Write Only) 

(Write Only) 




PTE.V 



:TBDATA 



Figure 3-4 Translation Buffer Data (TBDATA)— <IPR 59,o 3B .,6) 

Diagnostic software may use IPR 47 (TBTAG) and IPR 59 (TBDATA) to test the operation 
of the translation buffer. A write to TBTAG writes bits <31:9> of the source data into 
the VPN field of the current tag location and clears the TB.V bit. A subsequent write 
to TBDATA interprets the source data as a PTE; writes PTE.V, PTE.M, PTE.PROT, and 
PTE.PFN into the current PTE location; sets the TB.V bit; and increments the NLU 
pointer. 

These registers are provided for diagnostic purposes only and should not be written 
during normal operation. Writes to these registers must be done under very controlled 
conditions to achieve the desired results. Specifically, the following restrictions apply: 

• The NLU pointer must be in a known state. A TBIA will initialize the NLU pointer 
to the first location in the array. 

• Memory management must be enabled during the use of TBTAG and TBDATA, 
because writing to MAPEN implicitly does a TBIA and resets the NLU pointer. 

• Data- and instruction-stream references during the use of TBTAG and TBDATA must 
not be allowed to change the NLU pointer. 

NOTE 

The THIS, TBIA, TBCHK, TBTAG, and TBDATA BPRs are write only. An MFPR 
instruction used to read any of these registers will cause the P-chip (REX520) to 
initiate a reserved operand fault. 



3.1.6 Interrupts and Exceptions 

Both interrupts and exceptions divert execution from the normal flow of control. 

An interrupt is caused by some activity outside the current process and tjrpically transfers 
control outside the process (for example, an interrupt from an external hardware device). 
An exception is caused by the execution of the current instruction and is typically handled 
by the current process (for example, an arithmetic overflow). 
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3.1.6.1 Interrupts 

Interrupts can be divided into two classes: nonmaskable and maskable. For more 
information on error recoveiy and analysis, see Chapter 8. 

Nonmaskable interrupts cause a halt through the hardware halt procedure. The 
hardware halt procedure does the following: 

• Saves the PC, PSL, MAPEN<0> and a halt code in IPRs. 

• Raises the processor IPL to IF. 

• Passes control to the resident firmware. 

The firmware dispatches the interrupt to the appropriate service routine, based on the 
halt code and hardware event indicators. Nonmaskable interrupts cannot be blocked 
by raising the processor IPL, but can be blocked by running out of the halt protected 
address space. The exception is nonmaskable interrupts that generate a halt code of 3. 
Nonmaskable interrupts with a halt code of 3 cannot be blocked, because this halt code is 
generated after a hardware reset. 

Maskable interrupts cause the following: 

• The PC and PSL is saved. 

• The processor IPL is raised to the priority level of the interrupt (eitcept for Q22-bus, 
mass storage, and network interface interrupts, where the processor IPL is set to 17 
independent of the level at which the interrupt was received.) 

• The interrupt is dispatched to the appropriate service routine through the system 
control block (SCB). 

Table 3-6 lists the various interrupt conditions for the KA670, along with their associated 
priority levels and SCB offsets. 

Table 3-6 Interrupt Priority Levels 



Priority I^evel Interrupt Condition SCB Offset 

Nonmaskable BDCGK and BPOK negated, then asserted on Q22-bus 

(power up) 

BDCOK negated, then asserted while BPOK asserted on t 
Q22-bus (power up) 

BHALT asserted on Q22-bus t 

BREAK generated by the console device t 

IF Unused 

IE BPOK negated on Q22-bus OC 

ID Uncorrectable main memory errors (MASKED writes 60 

only) 

Main memory NXM errors on writes 60 

RDAL data parity errors on writes 60 

CP bus NXM/TIMEOUT on a write 60 

Q22-bus NXM/NOSACK on a write 60 



"These conditions generate a hardware halt procedure with a halt code o( 3 (hardwan; reset). 
tThese conditions generate a hardware halt procedure with a halt code of 2 (external halt). 
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Table 3-6 (Cont.) Interrupt Priority Levels 

Priority Level Interrupt Condition 



1C:1B 
lA 



13:10 
0F:01 



Q22-bus NOGRANT on a write 

Unused 

Correctable main memory errors 

Uncorrectable main memory errors (I-Stream) 

RDAL data parity errors on I -stream or nonrequest 
D-stream 

Primary cache tag parity errors (writes or I-Stream) 

Primary cache data parity errors (I-Stream) 

CP Bus NXM/TIMEOUTS errors (I-Stream) 



19:18 


Unused 


17 


BR7 L asserted 


16 


Interval timer interrupt 




BR6 L asserted 


15 


BR5 L asserted 


14 


Console terminal 



Programmable timers 

Mass storage interface 1 (DSSI port 1) (external) 

Mass storage interface 2 (DSSI port 2) (internal) 

Network interface 

Interprocessor doorbell 

BR4 L asserted 

Unused 

Software interrupt requests 



SCB Offset 



60 

54 
54 

54 

54 
54 
54 



Q-bus vector 
plus 200 16 

CO 

Q-bus vector 
plus 200i6 

Q-bus vector 
plus 200i6 

F8,FC 

78,7C 

108 

104 

IOC 

204 

Q-bus vector 
plus 200i6 



84-BC 



NOTE 

Because the Q22-bus does not allow differentiation between the four bus grant 
levels (for example, a level 7 device could respond to a level 4 bus grant), the 
KA670 CPU raises the IPL to 17 after responding to interrupts generated by the 
assertion of either BR7 L, BR6 L, BR5 L, or BR4 L. The KA670 maintains the IPL 
at the priority of the interrupt for all other interrupts. 

The interrupt system is controlled by three IPRs: 

• IPR 18, the interrupt priority level register (IPLR) (Figure 3-5) 
Used for loading the processor priority field in the PSL (bits<20:16>). 

• IPR 20, the software interrupt request register (SIRR) (Figure 3-6) 
Used for creating software interrupt requests. 

• IPR 21, the software interrupt summary register (SISR) (Figure 3-7) 
Records pending software interrupt requests at levels 1 to 15. 
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See the VAX Architecture Reference Manual for more information on these registers. 



5 4 



Ignored, Returns 



PSL<20:16>I :IPLR 



Figure 3-5 Interrupt Priority Level Register (IPLR)— (iPR 18to 12i6) 



4 3 



Ignored 



Request! :SIRR 



Figure 3-6 Software Interrupt Request Register (SIRR>— (IPL 20to 141^) 
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B 

Z 
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Figure 3-7 Software Interrupt Summary Register (SISR)— (IPL 2iiio iS^g) 

3.1.6.2 Exceptions 

Exceptions can be divided into three types: trap, fault, and abort. 

A trap is an exception that occurs at the end of the instruction that caused the exception. 
After an instruction traps, the PC saved on the stack is the address of the next 
instruction that normally would have been executed, and the instruction can be restarted. 

A fault is an exception that occurs during an instruction. A fault leaves the registers 
and memory in a consistent state, so eliminating the fault condition and restarting the 
instruction gives correct results. After an instruction faults, the PC saved on the stack 
points to the instruction that faulted. 

An abort is an exception that occurs during an instruction, leaving the value of registers 
and memory unpredictable. That is, the instruction cannot necessarily be correctly 
restarted, completed, simulated, or undone. After an instruction aboits, the PC saved 
on the stack points to the instruction that vi^as aborted. The aborted instruction may or 
may not be the instruction that caused the abort. The instruction may or may not be 
restarted, depending on the class of the exception and the contents olf the parameters 
that were saved. 

Exceptions can be divided into six classes. Table 3-7 lists exceptions by class. All the 
exceptions listed (except machine check) are described in greater detail in the VAX 
Architecture Reference Manual. 
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Table 3-7 Exception Classes 



Exception Class 



Type 



Arithmetic Exceptions 

Integer overflow 

Integer divide by zero 

Subscript range 

Floating overflow 

Floating divide by zero 

Floating underflow 

Memory Management Exceptions 

Access control violation 

Translation not valid 

Operand Reference Exceptions 

Reserved addressing mode 

Reserved operand fault or abort 

Instruction Execution Exceptions 

Reserved/privileged instruction 

Emulated instruction 

Change mode 

Breakpoint 

Tracing Exception 

Trace 

Serious System Failure Exceptions 

Console error halt 

Interrupt stack not valid 

Kernel stack not valid 

Machine checks consisting of the following: 

P-cache tag and data parity errors (D-stream reads) 

B-cache data parity errors (D-stream reads) 

RDAL data parily errors (nonrequested bytes only) 

Main memory uncorrectable errors (D-stream) 

Main memory read NXM errors 

CP bus read parity errors 

Q22-bus NXM/NOSACK errors (D-stream reads) 

Q22-bus read device parity errors 

Q22-bus read NO GRANT errors 

CP bus timeout/NXM read errors 



Fault 



SCB Offset 



Trap 


34 


Trap 


34 


Trap 


34 


Fault 


34 


Fault 


34 


Fault 


34 


Fault 


20 


Fault 


24 


Fault 


IC 




18 


Fault 


10 


Fault 


C8,CC 


Trap 


40-4C 


Fault 


2C 



28 



Abort 


• 


Abort 


* 


Abort 


08 


Abort 


04 



'Dispatched by resident firmware rather than through the SCB. 



Exceptions save the PC and PSL. In some cases, exceptions also save one or more 
parameters on the stack. Most exceptions do not change the IPL of the processor or cause 
the exception to be sent to the appropriate service routine through the SOB. 
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However, exceptions in the Serious System Failure class set the processor IPL to IF. 
The interrupt stack not valid exception and exceptions that occur while an interrupt or 
another exception is being serviced are sent to the appropriate service routine by the 
resident firmware. 

3.1.6.3 information Saved on a Machine Ctieck Exception 

In response to a machine check exception, the following information is pushed onto the 
stack as shown in Figure 3-8: 

• Contents of the processor status longword 

• Contents of the program counter 

• Eight parameters 

• A byte count 



1 1 

6 5 



Byte Count 



Machine Check Code 



Contents of VA Register 



Contents of VIBA Register 



ICCS Register Bit <6> Contents 



SISR <15:0> 



Internal State Information 



Contents of the Shift Count (SC) Register 



Contents of the Program Counter (PC) 



Contents of the Process Status Longword (PSL) 



SP 

SP + 4 
SP + 8 
SP + 12 
SP + 16 
SP + 20 
SP + 24 
SP + 28 
SP + 32 



Figure 3-8 information Saved on a IMaciiine Check Exception 

The following paragraphs explain the diagram of the stack pointer. 

Byte Count 

The byte count is <3l:0> (OOOOOOlSje, 24io) The byte count value indicates the number 
of bytes of information that follow on the stack, excluding the PC and PSL. 

VAX Restart Bit (R) 

Bit <31> of the longword at (SP)+4 after a machine check is the VAX restart bit (R). If R 
is 1, no state was by the instruction executing when the error was detected. If R is 0, the 
state was changed by the instruction. 

IMachine Check Code Parameter 

Bits <15:0> of the longword at (SP)+4 after a machine check contain the machine check 
parameter code. This code value indicates the type of machine check that occurred. A list 
of the possible machine check codes (in hexadecimal) and their associated causes follows: 

• Floating Point Enx>r8 (I^ble 3-8) 

These codes indicate that the FPA or CPU chips detected an error during the 
execution of a floating point instruction. 
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There are two most likely cause of these types of machine checks: 

A problem internal to the P-chip or FPA chips 

A problem with the interconnect between the two chips 

Machine checks due to floating point errors may be retried, depending on the state 
of the VAX restart bit of the longword at (SP)+4, and the FIRST PART DONE flag 
(captured in PSL <27>). The error may be retried only if the VAX restart bit is set 
and the FIRST PART DONE flag is cleared. Otherwise, the error is unrecoverable; 
depending on the current mode, the current process or the operating system should 
be terminated, or the FPA should be disabled. The information pushed on the stack 
by this type of machine check is from the instruction that caused the machine check. 

Table 3-8 Floating Point Errors 



Hex Code Error Description 



01 A protocol error was detected by the FPA chip during an F-chip operand/result 
transfer. 

02 An illegal opcode was detected by the FPA chip. 

03 The FPA chip detected an operand parity error. 

04 Unknown status was returned by the FPA chip. 

05 The returned FPA chip result had a parity error. 



• Memory Management Errors (Table 3-9) 

These codes indicate that the microcode in the P-chip detected an impossible situation 
while performing functions associated with memory management. The most likely 
cause of this type of a machine check is a problem internal to the P-chip. Machine 
checks due to memory management errors may be retried. Depending on the current 
mode, either the current process or the operating system should be terminated. The 
state of the POBR, POLR, PIBR, PILR, SBR, and SLR registers should be logged. 

Table 3-9 Memory IManagement Errors 

Hex Code Error Description 

08 A memory management error occurred while the P-chip was handling an access 
control violation/translation not valid fault. The READ/WRITE that caused the 
error missed the translation buffer. This error may be retried if the VAX restart bit 
or the FIRST PART DONE flag is set. 

09 A memory management error occurred while the P-chip was handling an access 
control violation/translation not valid fault. The READAVRITE that caused the 
error hit the translation buffer. This error may be retried if the VAX restart bit 
or the FIRST PART DONE flag is set. The fact that the errant reference hit the 
translation bulfer means that the P-chip is the most likely cause of the error. 

• Interrupt Error (Table 3-10) 

This code indicates that the interrupt controller in the P-chip requested a hardware 
interrupt at an unused hardware IPL. The most likely cause of this type of a machine 
check is a problem internal to the P-chip. Machine checks due to unused IPL errors 
may be retried. A nonvectored interrupt generated by a serious error condition 
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(memory error, power failure or processor halt) has probably been lost. The operating 
system should be terminated. 

Table 3-10 Interrupt Errors 

Hex Code Error Description 

OA A hardware interrupt was requested at an unused interrupt priority level (IPL). 

This error may be retried if the VAX restart bit or the FIRST I'ART DONE flag is 
set. 

• Microcode Errors (Table 3-11) 

These codes indicate that the microcode detected an impossible si<;uation while 
the instruction was executing. Note that most erroneous branches in the P-chip 
microcode will cause random microinstructions to be executed. Tht! most likely cause 
of this type of machine check is a problem internal to the P-chip. Machine checks 
due to microcode errors may be retried. Depending on the current mode, either the 
current process or the operating system should be terminated. 

Table 3-11 Microcode Errors 

Hex Code Error Description 

OB An impossible state (for example, an undefined state bit combination in the 

microsequencer) was detected during a M0VC3 or M0VC5 instruction (not move 
forward, move backward, or fill). This error may be retried if the FIRST PART 
DONE flag is set. 

OC An undefined trap code was produced by the P-chip. This error may be retried if 

the VAX restart bit is set and the FIRST PART DONE flag is cleared. 

OD An undefined control store address was reached by the micros«»quencer. This error 

may be retried if either the VAX restart bit or the FIRST PART DONE flag is set. 

• Read Errors (Table 3-12) 

These codes indicate that an error was detected while the P-chip v/as trying to read 
from either the primary cache, backup cache, main memory, or Q22-bus. The most 
likely cause of this type of machine check is determined from the state of the POSTS, 
PCERR, BCSTS, BCERR DSER, MEMCSR32, MEMCSR33, and MEMCSR34. 

Machine checks due to read errors may be retried depending on the state of the VAX 
restart flag, the FIRST PART DONE flag, and the P0STS<trap2> double-error bit. If 
either the FIRST PART DONE flag or VAX RESTART flag is set, and PCSTS<trap2> 
are cleared, then the error may be retried. Otherwise, the error is unrecoverable; 
depending on the current mode, either the current process or the operating system 
should be terminated. 

The information pushed on the stack by this type of machine check is from the 
instruction that caused the machine check. 
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Table 3-12 Read Errors 



Hex Code Error Description 



10 A primary cache tag or data parity error occurred during a read. 

11 An RDAL bus (error terminated cycle) or data parity error occurred during a read. 

• Write Error (Table 3-13) 

This code indicates that an error was detected while the P-chip was trying to write 
to either the primary cache, backup cache, or main memory. This is an unexpected 
MCHK abort response in the KA670, because ERR L should never be accepted on a 
write cycle. 

Table 3-13 Write Errors 

Hex Code Error Description 

12 An RDAL bus error (for example, ERR L terminated cycle) occurred on a write or 
clear write buffer. 

• KDAL Bus Errors (Table 3-14) 

This code indicates that the P-chip detected that the RDAL bus was in an undefined 
state. This machine check is not recoverable. 



Table 3-14 


RDAL Bus Errors 


Hex Code 


Error Description 


13 


An undefined RDAL bus state was detected by the P-chip. 



Contents of the P-Chip's Internal Virtual Address (VA) Register 

After a machine check, the location at (SP)+8 captures the contents of the P-chip's VA 
register at the time of the machine check. After a machine check of 10 or 11, the (SP)+8 
location represents the virtual address of the memory location that was being read when 
the error occurred. 

After a machine check of 12 (an RDAL bus error write or clear), the (SP)+8 location 
represents the virtual address of a location that was being referenced either during or 
after the error. Therefore, the contents of this field cannot be used for error recovery if 
the machine check occurred on a write operation. 

Contents of the P-Chlp's Internal VIBA Register 

After a machine check, the location at (SP)+12 captures the contents of the P-chip's VIBA 
register at the time of the machine check. After a machine check, this field represents 
the virtual address of the last I-stream fetch plus four. 

ICCS Register Bit<6> Contents 

After a machine check, the location at (SP)+16 bit<22> captures the contents of the P- 
chip's interval clock control and status (ICCS) register's bit<6> the interrupt enable (IE) 
at the time of the machine check. 
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SISR Register Bits<15:0> Contents 

After a machine check, the location at (SP)+16 bits<15:0> captures the contents of the P- 
chip's software interrupt summary register's (SISR) bits<15:0> at the time of the machine 
check. 

internal State inforniation 

The internal state information field is divided into five subfields (Table 3-15). 

Table 3-15 Internal State information Field 
Bits Description 

<31:24> Delta PC (PC -backup PC) 

<20:18> The access Type (AT) at machine check time. The 3-bit code is interpreted as 

follows: 

<000> — Read access 

<001> — Write access 

<010> — Modify access 

<101> — Address access 

<110> — Variable bit access 

<111> — Branch access 

<17:16> The data length (DL) at machine check time. The 2-bit code is interpreted as 

follows: 

<00> — Byte long 

<01> — Word long 

<10> — Longword long 

<11> — Quadword long 

<15:8> Opcode — This field captures the opcode of the instruction being read or executed 

at the time of the machine check. 

<3:0> Register Number (RN) — ^This field captures the number of tlie register that 

was the destination of the instruction being executed at the time of the machine 
check. 

Contents of the Shift Count (SC) Register 

Alber a machine check, the location at (SP)+24 captures the contents of the P-chip's shift 
count (SC) register at the time of the machine check. The P-chip uses this register in 
different ways, depending on the instruction being executed. 

Contents of the Program Counter (PC) 

PC<31:0> — ^Afler a machine check, the location at (SP)+ 28 captures th«f virtual address 
of the start of the instruction being executed at the time of the machine check. 
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Contents of the Process Status Longword (PSL) 

After a machine check, the location at (SP)+ 32 captures the contents of the PSL at the 
time of the machine check. 

NOTE 

The software must acknowledge machine checks by writing a to the MCESR 

(IPR 38). 

3.1.6.4 Machine Check Error Register (MCESR) IPR 38 

The machine check error register (IPR 38, MCESR) provides the mechanism by which 
software acknowledges receipt of a machine check. MCESR is a write-only register and 
has the format shown in Figure 3-9: 



Write Only 



Figure 3-9 Machine Check Error Register (MCESR)— (IPR 38io 26i6) 

When the P-chip microcode invokes the software machine check handler, it sets a 
MACHINE CHECK IN PROGRESS flag. If a machine check or memory management 
exception occurs while this flag is set, the microcode initiates a console double-error halt. 

Software should clear the MACHINE CHECK IN PROGRESS flag in the machine check 
handler as soon as possible , by writing a to IPR MCESR. Doing so re-enables normal 
machine check and memory management exception reporting. 



3.1.6.5 System Control Block (SCB) 

The system control block (SCB) consists of two pages in main memory that contain the 
vectors used to send interrupts and exceptions to the appropriate service routines. The 
SCB is pointed to by IPR 17, the system control block base register (SCBB). Figure 3-10 
shows the format of the system control block format, and Table 3-16 describes the 
format. 



3 3 2 
1 9 



9 8 



MBZ 



Physical Longword Address of SCB 



MBZ 



Figure 3-10 System Control Block Base Register (SCBB)— (iPL 17^0 11 is) 
Table 3-16 The System Control Block Format 



SCB Interrupt/Exception 

Offset Name 



TVpe 



Number 

of 

Params Notes 



00 


Passive release 


Interrupt 





IPL is raised to request 
IPL. 


04 


Machine check 


Abort 


6 


Parameters reflect 
machine state. 
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Table 3-16 (Cont.) The System Control Block Format 



SCB 
OfEset 


Interrupt/Exception 
Name 


Type 


Number 

of 

Params Notes 


08 


Kernel stack not valid 


Abort 





Must \xi serviced on 
interrupt stack. 


OC 


Power fail 


Interrupt 





IPL is raised to IE. 


10 


Reserved/privileged 
instruction 


Fault 







14 


Customer reserved 
instruction 


Fault 





XFC insttruction. 


18 


Reserved operand 


Fault/Abort 





Not always recoverable. 


IC 


Reserved addressing mode 


Fault 







20 


Access control 
violation/vector alignment 
fault 


Fault 


2 


Parameters are virtual 
address, status code. 


24 


Translation not valid 


Fault 




2 Parameters are virtual 
address,, status code. 


28 


Trace pending (TP) 


Fault 







2C 


Breakpoint instruction 


Fault 







30 


Unused 


- 


- 


Compatibility mode in 
other ViOC machines. 


34 


Arithmetic 


T^ap/Fault 




Parameter is type code. 


38-3C 


Unused 


- 






40 


CHMK 


Trap 




Parameter is sign- 
extended operand word. 


44 


CHME 


TVap 




Parameter is sign- 
extended operand word. 


48 


CHMS 


IVap 




Parameter is sign- 
extended operand word. 


4C 
50 


CHMU 
Unused 


IVap 




Paramei»r is sign- 
extended operand word. 


54 


Memory soft error 
notification (corrected read 
error) 


Interrupt 





IPLislA. 


58-5C 


Unused 


- 


. 




60 


Memory hard error 
notification 


Interrupt 





IPL is ID. 


64 


Unused 


- 


_ 




68 


Vector unit disabled 


Fault 





Vector instructions. 


6C-74 


Unused 


- 


. 




78 


Programmable timer 


Interrupt 





IPL is 14. 


7C 


Programmable timer 1 


Interrupt 





IPL is 14. 
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Table 3-16 (Com.) The System Control Block Format 



SCB 
Offset 


Interrupt/Exception 
Name 


Type 


Number 

of 

Params Notes 


80 


Unused 


, 


_ 




84 


Software level 1 


Interrupt 







88 


Software level 2 


Interrupt 





Ordinarily used for AST 
delivery. 


8C 


Software level 3 


Interrupt 





Ordinarily used for process 
scheduling. 


90-BC 


Software levels 4-15 


Interrupt 







CO 


Interval timer 


Interrupt 





IPL is 16. 


C4 


Unused 


- 


. 




C8 


Emulation start 


Fault 


10 


Same mode exception, PPD 
- 0; parameters are 
opcode, PC, specifiers. 


CC 


Emulation continue 


Fault 





Same mode exception.FPD 
= 1: no parameters. 


108 


Mass storage interface 1 
(DSSI PORT 1) 


Interrupt 





IPL is 14. 


104 


Mass storage interface 2 
(DSSI PORT 2) 


Interrupt 





IPL is 14. 


D8-DC 


Unused 


- 


- 




PO 


Network interface 


Interrupt 





IPL is 14. 


F4 


Unused 


- 


- 




F8 


Console receiver 


Interrupt 





IPL is 15. 


FC 


Console transmitter 


Interrupt 





IPL is 15. 


204 


Interprocessor doorbell 


Interrupt 





IPL is 14. 



Vectors in the range of 100 to FFFC are used to directly vector interrupts from the 
external bus. The SCBB vector index is determined from bits <15:2> of the value 
supplied by external hardware. 

The new PSL priority level is determined by either the external interrupt request level 
that caused the interrupt or by bit <0> of the value supplied by external hardware. 

If bit<0> is 0, the new IPL level is determined by the interrupt request level being 
serviced. IRQ<3> sets the IPL to ITig; IRQ<2>, Ifiie; IRQ<1>, 15i6 ; and IRQ<0>, 14i6- 
If bit<0> of the value supplied by external hardware is 1, then the new IPL is forced to 
17l6. 

The ability to force the IPL to 17i6 supports an external bus, such as the Q22-bus, that 
cannot guarantee that the device generating the SCBB vector index is the device that 
originally requested the interrupt. 

For example, the Q22-bus has four separate interrupt request signals that correspond to 
IRQ<3:0>, but only one signal to daisy chain the interrupt grant. Furthermore, devices 
on the Q22-bus are ordered so that higher priority devices are electrically closer to the 
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bus master. If an IRQ<1> is being serviced, there is no guarantee that a higher priority 
device will not intercept the grant. 

Software must determine the level of the device that was serviced and set the IPL to the 
correct value. Only device vectors in the range of 100 to FFFCie should be used, except 
by devices emulating console storage and terminal hardware. 

3.1.6.6 The Hardware Halt Procedure 

The hardware halt procedure is the method used by the hardware to assist the firmware 
in emulating a processor halt. The hardware halt procedure saves the following from IPR 
42 (SAVPC) and IPR 43 (SAVPSL): 

IPR 42 Current value of the PC 

(SAVPC) 



IPR 43 
(SAVPSL) 



Current value of the PSL, MAPEN<0>, a halt code, and the valid bit 



Figure 3-11 and Figure 3-12 show the formats for (SAVPC) and (SAVPSL), respectively. 

SAVPSL<14> (valid bit) is set to if the PSL is valid, and set to 1 if the PSL is invalid. 
The valid bit is undefined after a halt caused by a system reset. 



Saved PC (Read Only) 



:SAVPC 



Figure 3-11 Console Saved PC (SAVPC)— (IPR 42,o 2Ai6) 



3 
1 


1 1 
6 5 


1 1 

4 3 8 


7 







PSL<31:16> 


1 Halt Code 




PSL<7:0> 




1 . 


n 






Valid Bit (Valid if 0) 


_ 







:SAVPSL 



Figure 3-12 Console Saved PSL (SAVPSL)— (IPR 43io 2Bi6) 

The current stack pointer is saved in the appropriate internal register. The PSL is set 
to 04 IF 0000 16 (IPL=1F, kernel mode, using the interrupt stack), and the current stack 
pointer is loaded from the interrupt stack pointer. Control is then passied to the resident 
firmware at physical address 2004 0000 le- Table 3-17 shows the state of the CPU after 
a halt. 



Table 3-17 CPU State After a Halt 



Register 



New Contents 



SAVPC 

SAVPSL<31:16,7:0> 
SAVPSL<I5> 
SAVPSL<14> 



Saved PC 

Saved PSL<31:16,7:0> 

Saved MAPEN<0> 

Valid PSL flag (unknown for halt code of 3) 
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Table 3-17 (Com.) CPU State After a Halt 



Register 


New Contents 


SAVPSL<13:8> 


Saved halt code 


SP 


Current interrupt stack (IPR 4) 


PSL 


041F 0000 16 


PC 


2004 0000 ,6 


MAPEN 





ICCS 


(for a halt code of 3) 


SISR 


(for a halt code of 3) 


ASTLVL 


(for a halt code of 3) (asynchronous system traps level register) 


All else 


Undefined 



The firmware uses the halt code in combination with hardware event indicators to send 
the interrupt or exception responsible for the halt to the appropriate firmware routine 
(either console emulation, power-up, reboot, or restart). Table 3-18 lists the interrupts 
and exceptions that can cause a halt, along with their corresponding halt codes and event 
indicators. 



Table 3-18 HALT Codes 



Halt Code 



Interrupt Condition 



Halt Codes for Unmaskable Interrupts 



Event Indicator 



2 External Halt (P-chip IIALT_L pin asserted). 

BHALT asserted on the Q22-bus. DSER<15> 

BDCOK negated and asserted on the Q22-bu8 while DSER<14> 

BPOK stays asserted (Q22-bus reboot/restart). 

BREAK generated by the console. RXDB<11> 

3 Hardware Reset (P-chip RESET pin negated) 

BDCOK and BPOK negated then asserted on the Q22- 
bus (power-up). 

BDCOK negated and asserted on the Q22-bus while 
BPOK stays asserted (Q22-bus reboot/restart). 

Halt Codes for Exceptions 

6 Halt instruction executed in Kernel Mode. 

Halt Codes for Exceptions that Occur While Serving an Interrupt or Exception 

4 Interrupt stack not valid during exception. 

5 Machine check during normal exception. 

7 SCB vector bits<l:0>= 11. 

8 SCB vector bits<l:0>= 10. 

A CHMx executed while on interrupt stack. 
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Table 3-1 8 (Cont.) HALT Codes 



Halt Code Interrupt Condition JBvent Indicator 

10 Access violation (ACV) or translation not valid (TNV) 
during machine check exception. 

11 ACV or TNV during kernel stack not valid exception. 

12 Machine check during machine check exception. 

13 Machine check during kernel stack not valid exception. 
19 PSL<26:24>= 101 during interrupt or exception. 

lA PSL<26:24>= 110 during interrupt or exception. 

IB PSL<26:24>= 111 during interrupt or exception. 

ID PSL<26:24>= 101 during REI. 

IE PSL<26:24>= 110 during REI. 

IF PSL<26:24>= 111 during REI. 

3F Power-up self-test failed in the P-chip (microcoded). 



3.1.7 System Identification 

The KA670 firmware and operating system software references two registers to determine 
the processor on which they are running. The first register is the system identification 
(SID) register , an internal processor register. The second register is the system 
identification extension (SIE) register, a firmware register in the KA670 EPROM. 

3.1.7.1 System Identification Register 

The system identification (SID) register (IPR 62) is a 32-bit, read-only register 
implemented in the CPU chip. The SID register is used to identify the processor type 
and its microcode revision level. The SID longword is read from IPR 62, using the MFPR 
instruction. This longword value is processor-specific. Figure 3-13 shows the format of 
the SID register. Table 3-19 lists the bit definitions. 

3 2 2 

1 4 3 8 7 



CPU Type 


Reserved 


Microcode Rev. 



Figure 3-13 System Identification Register (SID>— (IPR 62io 3Ei6) 
Table 3-19 System Identification Register (SID) 

Field Name RW Description 

The CPU type is the processor-specific identification code. 
Reserved for future use. 
Version of the microcode. 



<31;24> 


CPU type 


RO 


<23:8> 


Reserved 


RO 


<7:0> 


Version 


RO 
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3.1.7.2 System Identification Extension Register (20040004) 

The system identification extension (SIE) register is an extension of the SID register, 
used to further differentiate between hardware configurations. The SID register identifies 
which CPU and microcode is executing, and the SIE register identifies what module and 
firmware revision are present. Note that the fields in this register depend on the CPU 
type in SID<31:24>. 

By convention, all Micro VAX systems implement a longword at physical location 
20040004 in the firmware EPROM for the SIE register. This 32-bit, read-only register 
is implemented in the KA670 ROM. Figure 3-14 shows the format of the SIE register. 
Table 3-20 lists the definitions of the register bits. 



3 2 

1 4 


2 1 

3 6 


1 

5 8 


7 


Sys_Type 


Rev. Level 


Sys_Sub_Type 


Reserved 



Figure 3-14 System Type Register (SYS_TYPE) 



Table 3-20 System Type Register (SYS_TYPE) 



Field Name 



31:24 Sys_type 



23:16 Version 



15:8 



7:0 



Sys_sub_ 
type 



Reserved 



RW Description 



RO This field identifies the type of system for a specific processor. 

01 : Q22-bus single-processor system. 

RO This field indentifies the resident version of the firmware EPROM, 
encoded as two hexadecimal digits. For example, if the banner 
displays V5.0, then this field is SOis. 

RO This field indentifies the particular system subtype. 

01 : KA650 

02 : KA640 

03 : KA655 
04 : KA670 

This field is reserved. 



3.1.8 Accelerator Control and Status Register (ACCS) IPR 40 

The accelerator control and status register (IPR 40, ACCS) provides the FPU with the 
ability to generate bad data parity on write operations. Figure 3-15 shows the format of 
the ACCS. Table 3-21 lists the register bit definitions. 



3 3 
1 



2 1 



M8Z 



1] 



I — Write Ever* Parity 



FPU Present 
Must be — 



Figure 3-15 Accelerator Control and Status Register (ACCS)— (IPR 40to 28i6) 
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NOTE 

The M bit should be set in any PTE that maps pages to be written while write 
even parity is enabled. Failure to do so may result in a PTE being written with 
bad parity during an M bit update. 

Table 3-21 Accelerator Control and Status Register Bit Definitions 



Data Bit Name 



Type 



<31> 



Write even parity 



<30:2> 
<1> 



Reserved 
FPU present 



<0> 



Must be zero 



Definition 



Write only This bit enables the generation of bad 

data parity for wiite operations. If the 
bit is set to 1, all subsequent cache 
or memory writes and F-chip operand 
transfers are done with bad data 
parity on all bits. This bit is used for 
diagnostics only, and should never be 
set during normal operations. 

The write even parity bit is 
automatically cleared if ACCS is 
read with an MFPR instruction. 
Also, the write-even-parity state is 
cleared at the start of any interrupt, 
exception, or consiole halt, to prevent 
an exception stack frame from being 
written with bad data parity. The 
write even parity bit is cleared during 
a reset. 

Must be read as 0. 

Read/write This bit enables use of the F-chip. 

If the FPU present bit is set to 1, 
floating point and longword-length 
integer multiply instructions are 
passed to the F-cMp for execution. 

If the FPU present is set to 0, 
the execution of a floating point 
instruction results in a reserved 
instruction fault. 

Since an F-chip is included on every 
KA670 module, the FPU present 
bit should be set during normal 
operation. If an ]P-chip error is 
detected, the F-chip may be disabled 
if the operating system emulation 
software is loaded. This bit is cleared 
during a reset. 

- Reserved. Must lie read as 0. 



3.1.9 CPU References 

CPU references are divided into three groups: 

* Request instruction-stream read references 

* Demand data-stream read references 

* Write references 
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3.1.9.1 instruction-Stream Read References 

The CPU has an instruction prefetcher for prefetching program instructions from either 
cache or main memory. The prefetcher uses a 16-byte (4-longword) instruction prefetch 
queue (IPQ). Whenever there is an empty longword in the IPQ, and the prefetcher is not 
halted due to an error, the instruction prefetcher generates an aligned quad word, request 
instruction-stream (I-stream) read reference. 

3.1.9.2 Data-Stream Read References 

Whenever the CPU needs data immediately to continue processing, a demand data- 
stream (D-stream) read reference is generated. Demand D-Stream references are 
generated on the following references: 

• Operand 

• Page table entry (PTE) 

• System control block (SCB) 

• Process control block (PCB) 

When interlocked instructions such as branch on bit set and set interlock (BBSSI) are 
executed, a demand D-stream read-lock reference is generated. 

All data read references are translated into an appropriate combination of masked 
and unmasked, aligned quadword read references. The reasons for the translation are 
that (1) the CPU does not impose any restrictions on data ahgnment other than the 
aligned operands of the add aligned word interlocked (ADAWI) and interlocked queue 
instructions, and (2) memory can only be accessed one aligned quadword at a time. 



If the required data is . . . Then the following is generated . . . 

A byte, a word within a quadword, or an A single, aligned quadword, demand D-stream read 

aligned quadword reference 

A word that crosses a quadword boundary Two successive, aligned quadword, demand D- 
or an unaligned quadword stream read references 

Larger than a quadword The data is divided into a number of successive, 

aligned quadword, demand D-stream reads, with no 
optimization. 

3.1.9.3 Write References 

Whenever data is stored or moved, a write reference is generated. All data write 
references are translated into an appropriate combination of masked and unmasked, 
aUgned quadword write references. The reason for the translation is that (1) the CPU 
does not impose any restrictions on data alignment (other than the aligned operands of 
the ADAWI and interlocked queue instructions), and (2) memory can only be accessed one 
aligned quadword at a time. 



If the required data is . . . Then the following is generated . . . 

A byte, a word within a quadword, or an A single, aligned quadword, write reference 

aligned quadword 

A word that crosses a quadword boundary Two successive, aligned quadword, write references 
or an unaligned quadword 
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If the required data is . . . Then the following is generated . . . 

Larger than a quadword The data is divided into a nuinl)er of successive, 

aligned quadword writes 

3.2 KA670 Floating Point Accelerator 

The KA670 module includes a floating point accelerator (FPA) chip to enhance the 
performance of floating point and certain integer calculations. These functions are 
implemented by the F-chip. 

3.2.1 Floating Point Accelerator Data Types 

The KA670 floating point accelerator supports the following data types: 

• F_floating 

• D_floating 

• G_floating 

• Bjrte (conversion to and from floating formats) 

• Word (conversion to and from floating formats) 

• Longword (conversion to and from floating formats and multiply) 

3.2.2 Floating Point Accelerator Instructions 

The KA670 FPU chip processes the following VAX instructions: 

• F_floating add, subtract, multiply, divide, convert, move, compare, negate, and test 
instructions. ACBF, EMODF, and POLYF are emulated, not processed by the FPU 
chip. 

• D_floating add, subtract, multiply, divide, convert, move, compare, negate, and test 
instructions. ACBD, EMODD, and POLYD are emulated, not processed by the FPU 
chip. 

• G_floating add, subtract, multiply, divide, convert, move, compare, negate, and test 
instructions. ACBG, EMODG, and POLYG are emulated, not processed by the FPU 
chip. 

• Longword-length integer multiply instructions. 

If the FPU chip is absent or disabled, the execution of a floating point instruction results 
in a reserved instruction exception. The execution of a longword-length integer multiply 
instruction is done by the FPU chip microcode. 

3.2.3 Operand and Result Transfer 

The CPU and FPU chips work together to execute instructions accelerated by the FPU 
chip. The CPU parses the opcode and instruction specifiers, then sends opcode and 
operands to the FPU. 

Operands from the GPRs, the instruction stream, and the primary cache are explicitly 
transferred from the CPU to the FPU. Floating point short literals an! transferred in 
unexpanded form; it is the FPU's responsibility to expand them to the correct format. . 
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Operands from the backup cache or from memory are returned to both the CPU and the 
FPU simultaneously — they are not received by the CPU and rebroadcast to the FPU. 

When the FPU receives the last operand for an instruction, the FPU begins to compute 
the result. In parallel, the CPU completes any instruction setup (for example, parsing a 
destination specifier). The CPU then requests the result from the FPU and stalls until 
the result is returned. Finally, the CPU stores the result in GPR or memory and sets the 
PSL condition codes. 

The FPU tests for exception conditions and reports them to the CPU, in response to the 
request for the result. Detected exceptions include reserved operands, floating divide by 
zero, floating overflow, floating underflow, and data parity errors. 

3.2.4 Power-Up State 

At power-up, the CPU microcode disables the FPU as part of the chip initiahzation 
process. Until the FPU is enabled, the execution of any floating point instruction results 
in a reserved instruction exception. The console should enable the FPU by setting bit <1> 
of the accelerator control and status (ACCS) processor register, then test the operation of 
the FPU. If the FPU fails these tests, the console should clear ACCS<1> again. 

Console Programmer's Note 

The FPU does not accept memory operands in I/O space. Because the FPU executes 
longword-length integer multiply instructions as well as floating point instructions, it 
may not produce correct results or report operand parity errors if it is enabled during the 
execution of the console code from the boot ROM. 

Therefore, the FPU should be disabled on any console entry, by writing a to bit 1 of the 
ACCS processor register. This action causes the CPU to execute the integer instructions 
in microcode and invoke a reserved instruction fault for the floating point instructions. 

The FPU is normally tested during the power-up self-test. In this case, it is the 
responsibility of the console programmer to understand the restrictions involved and 
perform the test in a controlled manner. 
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This chapter describes the operation and features of the KA670's cache memory and main 
memory controller. 

4.1 KA670 Cache Memory 

To maximize CPU performance, the KA670 incorporates a two-level cache: hierarchy. The 
primary cache consists of 2 kilobytes of memory contained entirely in the CPU chip. The 
backup cache consists of the C-chip and twenty-four 16K x 4 static RAMs. The C-chip 
contains the tag store and the control logic for the backup cache RAMs. The backup 
cache is a 128-kilobyte cache used in combination with the CPU to provide a performance 
boost for the system. 

The C-chip also serves to filter invalidates that may come from a memory controller, 
so not all invalidates have to be broadcast on the data and address lines. To filter 
invalidates, the C-chip maintains a copy of the primary cache tag store and uses 
an invalidate bus (I-bus). The I-bus can be used by DMA devices to determine if a 
memory location is cached in either cache. Using the I-bus eliminates the need to run 
an invalidate cycle of the RDAL for every DMA. Therefore, only those DI4As that hit in 
either cache cause an invalidate cycle saving RDAL bandwidth. 

4.1.1 Cacheable References 

Any reference stored by the primary or backup cache is called a cacheable reference. The 
primary and backup caches store CPU read references to the VAX memory space (bit 
<29> of the physical address equals 0) only. They do not store references to the VAX 
I/O space or DMA references by the Q22-bus interface. Two types of CPU references 
are stored — request instruction-stream read references and demand data-stream read 
references other than read-lock references. 

If the CPU generates . . . Then . . . 

A noncacheable reference or a cacheable A single quadword reference of the same type is 

reference not stored in the primary cache generated on the RDAL bus. 

A cacheable reference stored in the No reference is generated on the BIDAL bus. 

primary cache 
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4.1.2 Primary Cache Overview 

The primary cache is a 2-kilobyte cache, directly mapped, with a quadword fill and 
allocate (block) size. The cache is read-allocate, no- write-allocate, and write-through. The 
primary cache tag store contains one tag and one valid bit for each primary cache block. 
There are 256 tags mapping 256 quadword data blocks. Each tag entry includes an 18-bit 
tag, 1 valid bit, and 1 parity bit. Each data block contains 8 data bytes and 8 parity bits, 
one for each data byte. 

4.1.2.1 Primary Cache Organization 

The primary cache is arranged in 64 rows, with 4 quadwords and 4 tag entries per row. 
Figure 4—1 shows the format. 
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Figure 4-1 Primary Cache Data and Tag Layout 

Each tag entry of the memory is organized as shown in Figure 4-2. 
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Figure 4-2 Primary Cache Tag Entry 
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The tag consists of bits <28:11> of the physical address (PA). The tag parity bit is the odd 
parity computed over 18 address bits, PA<28:11>. It is computed by the primary cache. 
The valid bit is used to indicate whether or not the corresponding entry in the primary 
cache is valid. The valid bit is not included in the tag parity calculation. 

The data array has each quadword logically arranged as shown in Figure 4-3. 
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Figure 4-3 Primary Cache Data Entry 

Each primary cache entry consists of one quadword. Odd parity information is 
maintained separately for each byte. The primary cache neither generates nor checks 
parity on data; the primary cache only stores parity information. The CPU (P-chip) bus 
interface unit (BIU) takes the responsibility of checking parity for the data. If a parity 
error is detected on the data coming from or written into the primary cache, the primary 
cache may be flushed or switched off by the resulting microtrap routine. 

4.1.2.2 Primary Cache Address Translation 

The physical addresses supplied to the primary cache consist of 28 bits (address<29:2>). 
Bit <2> of the physical address selects a longword out of the quadwords of the primary 
cache. Bits <8:3> select one of the rows of the primary cache memory. Because there are 
four tag entries in each row, two bits of the address (bits <10:9>) are used to select one of 
the four columns. Bits <28:11> are stored as tags in the primary cache. Bit <29> of the 
address specifies I/O space. I/O space addresses are not cached. 

Whenever the CPU requires an instruction or data, the contents of the primary cache are 
checked to determine if the referenced location is stored there. The cache contents are 
checked by translating the physical address as shown in Figure 4-4. 

On noncacheable references, the reference is never stored in the cache. So a primary 
cache miss occurs, and a single quadword reference is generated on the RDAL bus. 
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Figure 4-4 Primary Cache Physical Address Translation 
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4.1.2.3 Primary Cache Data Block Allocation 

Cacheable references that miss the primary cache initiate a quadword read to on the 
RDAL bus. When the requested quadword is supplied by the backup cache or the main 
memory controller, the requested quadword is passed on to the CPU; a data block is 
allocated in the cache to store the quadword. 

Since the KA670 supports 512 megabytes (64 mega-quadwords) of physical memory, 
up to 1 mega-quadwords share each row (four data blocks) of the cache. Contiguous 
programs larger than 2 kilobytes and noncontiguous programs separated by 2 kilobytes 
will overwrite themselves when cache data blocks are allocated. 

4.1.2.4 Primary Cache Behavior on Writes 

On CPU-generated write references, the primaiy cache is write-through. For all CPU 
write references that hit the primary cache, the contents of the referenced location in 
main memory is updated as well as the copy in the cache. 

On DMA write references that hit the primary cache, the cache entry containing the copy 
of the referenced location is invalidated. 

4.1.2.5 Primary Cache Internal Processor Registers 

The primary cache includes four registers that may be accessed using IPR reads (move 
from processor register, MFPR) and writes (move to processor register, MTPR). These 
four registers are used for controlling the primary cache operation, storing status, and 
diagnostics and error recovery. Table 4-1 lists the four registers. 

Table 4-1 Primary Cache Internal Processor Registers 





Mnemonic 


IPR Number 




Register Name 


Hex 


Decimal 


Ty|.e 


Primary cache tag array 


PCTAG 


7C 


124 


Read/write 


Primary cache index register 


PCIDX 


7d 


125 


Read/ write 


Primary cache error address 


PCERR 


7E 


126 


Read/write 


register 










Primary cache status register 


PCSTS 


7F 


127 


Read/write 



4.1.2.5.1 Primary Cache Status Register (PCSTS)— IPR 127 

The primary cache status register (PCSTS) is used to control the primary cache's mode 
of operation, flush the cache, and maintain information about all errors detected by the 
CPU (not only primary cache errors). The PCSTS register is considered locked to errors 
that result in an interrupt, if the interrupt bit (PCSTS<5>) or trapl bit (PCSTS<7>) is 
set. For errors that result in a trap, this register is considered locked only if trapl is set. 

Figure 4-5 shows the format of the status register. Table 4-2 lists bit definitions. 
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Figure 4-5 Primary Cache Status Register (PCSTS>— (IPR 127,0 ^F^g ) 
Table 4-2 Primary Cache Status Register 



Data Bit 



Name 



Definition 



<31:13> 
<12> 



MBZ 

B cachehit 



Must be zero. Always read as Os. Writes have no 
effect. 

Backup cache hit (read only). This bit indicates that 
the error condition causing the primary cache status 
register to lock was a reference that hit in the backup 
cache. For RDAL parity errors, this bit can be used 
to determine who was driving the the RDAL bus. If 
B_cache_hit is set, the source was the backup cache. If 
B_cache_hit is clear, the memory subsystem was the 



<11> 



Bus_error 



This bit is updated for any reference that has an 
associated error, if the primary cache status register is 
not already locked. B_cache_hit is cleared on reset. 

Bus error (read only). This bit is set when an RDAL 
read, write, or clear-write-buffer command results in 
an error. 

If the RDAIj command was an I-stream read, the 
interrupt bit (PCSTS<5>) is also set. The error is 
reported as an IPL lA le soft error interrupt. 

If the RDAL command was a D-stream read, write 
or clear-write-buffer, trapl (PCSTS<7>) or trap2 
(PCSTS<6>) is also set. The error results in a machine 
check. 

This bit is updated for any reference that has an 
associated error, if the primary cache status register is 
not already locked. Bus_error is cleared on reset. 
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Table 4-2 (Cont.) Primary Cache Status Register 



Data Bit 



Name 



Definition 



<10> 



P_<iata_parity 



<9> 



RDAL_data_parity 



<8> 



Tag_parity_error 



Primary cache data error (read onily). This bit is 
set when a read hits in the primary cache and the 
requested data has a parity error. 

If the RDAL command was an I-stream read, the 
interrupt bit (PCSTS<5>) is also set. The error is 
reported as an IPL lA i6 soft error interrupt. 

If the RDAL command was a D-stieam read, write 
or clear-write-buflFer, trapl (PCST£k7>) or trap2 
(PCSTS<6>) is also set. The error results in a machine 
check. 

This bit is updated for any reference that has an 
associated error, if the primary cache status register is 
not already locked. P_data_error is cleared on reset. 

RDAL data parity error (read only). This bit is set 
when the data returned in response to a non-I/O space 
RDAL read has a parity error. 

If the error is detected on the nonrequested longword of 
a D-stream read, or on either longword of an I-stream 
read, the interrupt bit (PCSTS<5>) is also set. The 
error is reported as an IPL lA te soft error interrupt. 

If the RDAL data parity error is detected on the 
requested longword of a D-stream read, trapl 
(PCSTS<7>) or trap2 (PCSTS<6>) is also set. The 
error results in a machine check. 

This bit is updated for any reference that has an 
associated error, if the primary cache status register 
is not already locked. RDAL_data_,parity is cleared on 
reset. 

Primary cache tag parity error (read only). This bit 
is set if a primary cache tag parity error is detected 
during a read, write, or invalidate reference, providing 
the PCSTS register has not been not locked by a 
previous error. 

If tag_parity_error is set, the intenrupt bit (PCSTS<6>) 
is also set. The error is reported aa an IPL lA le soft 
error interrupt. 

If the reference was a D-stream read that hit, trapl 
(PCSTS<7>) or trap2 (PCSTS<6>) iis also set. The error 
results in a machine check. 

This bit is updated for any reference that has an 
associated error, if the primary cache status register 
is not already locked. Ttag.parity.error is cleared on 
reset. 
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Table 4-2 (Cont.) Primary Cache Status Register 



Data Bit 



Name 



Definition 



<7> 



Trapl 



<6> 



Trap2 



<5> 



Interrupt 



<4> 



P_cache_hit 



<3> 



Enable_refresh 



Write one to clear. This bit is set when an error 
detected by the CPU results in a machine check. 
PCSTS<12:8> and the primary cache error address 
register (PCERR IPR 126), are latched until trapl 
is cleared. If this bit is set, the primary cache is not 
automatically flushed. However, it is automatically 
disabled (although enable_PTS PCSTS<1> is not 
changed). TVapl is cleared on reset and by writing 1 to 
it with an MTPR instruction. 

Write one to clear. This bit is set when an error 
detected by the CPU results in a machine check and 
trapl (PCSTS<7>) is already set. 

When trap2 is set, it indicates that a nested error 
occurred and that PCSTS<12:8> and the primary 
cache error address register (PCERR IPR 126) contain 
information about the first error that set trapl. This 
should be considered a fatal error condition. 

If trap2 is set, the primary cache is not automatically 
flushed. However, it is automatically disabled 
(although enable_PTS (PCSTS<1>) is not changed). 
Trap2 is cleared on reset and by writing 1 to it with an 
MTPR instruction. 

Write one to clear. This bit is set when an error 
detected by the CPU results in an interrupt at IPL lA 
16- PCSTS<12:8> are latched unless the interrupt bit 
or trapl (PCSTS<7>) was previously set; they remain 
latched until the interrupt bit is cleared or another 
error sets trapl. 

If the interrupt bit is set, the primary cache is 
automatically disabled (although enable_PTS 
(PCSTS<1>) is not changed). The interrupt bit is 
cleared on reset and by writing 1 to it with an MTPR 
instruction. 

Primary cache hit (read only). This bit is the latched 
output value of the tag comparator. This bit is updated 
for all D-stream reads, writes, or invalidate cycles. It 
may be used to test the primary cache hit logic. P_ 
cache_hit is cleared on reset and should be used for 
diagnostic purposes only. 

Enable refresh (read/write). When this bit is set, the 
automatic refresh of the primary cache take place and 
the refresh counter increments. When this bit is a 
cleared, refresh is disabled, the refresh counter does 
not increment, and the refresh timer logic is disabled. 
This bit should be set during normal primary cache 
operations. Enable_refresh is cleared on reset. 
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Table 4-2 (Cont.) Primary Caciie Status Register 



Data Bit 



Name 



Definition 



<2> 



Flush_cache 



<1> 



Enable_PTS 



<0> 



Force hit 



Plush primary cache (write only). This bit is used 
to clear all valid bits in the primary cache tag array. 
If this bit is written with a 1, the ]primary cache is 
flushed. The hardware then clears this bit in the next 
cycle, so that it is always read as a 0. 

NOTE 

The state of the primary cache is unpredictable 
if enable_PTS is (PCSTS<1>). Therefore, the 
primary cache should be flushed before it is 
enabled. This may be done as a separate IPR 
write of flush_cache before enable_PTS is set in 
the primary cache status register. It niay also be 
done by setting flush.cache and enable.PTS in 
the same IPR write to the primary cache status 
register. 

Enable primary cache (read/write). This bit enables 
or disables normal operation of the primary cache. If 
the bit is set, both I-stream and D -stream references 
are cached, and primary cache t£tg and data parity 
errors are reported. I/O references are never cached. 
If the bit is cleared, all references (read, write, and 
invalidate) result in a miss. enable_PTS is cleared on 
reset. 

Force a primary cache hit (read/wirite) When this 
bit is set, the primary cache forces a hit for all 
memory references. Memory write requests still 
go to the external memory. I/O reiferences are not 
affected (they are not cached). Whien this bit is set, 
the following are disabled: primary cache tag parity 
error reporting associated with D-»tream reads, writes, 
and invalidates, and primary cache data parity errors 
associated with D-stream reads. 

RDAL errors (parity errors associsited with the data 
present on the RDAL or bus errors) are not affected 
by this bit. Force_hit should not he used to satisfy 
I-stream reads, since primary cache tag or data parity 
errors detected during I-stream reads may cause a 
loop. Force_hit may be used to initialize the primary 
cache data array. Force_hit is cleared on a reset. This 
bit is for diagnostics only and should be cleared during 
normal operation. 

NOTE 

When the primary cache is off (enable_PTS s 0) 
and force_}iit is set, the operation of the primary 
cache is unpredictable. 



4.1.2.5.2 Primary Cache Error Address Register (PCERR)— IPf^ 126 

For read commands, the primary cache error address register (PCER]R) latches and 
holds the physical address of an error that causes trapl (PCSTS<7>) to set. Since 
write errors are asynchronous to the instruction pipeline, the address latched for write 
commands is not the address of the error. For write commands, no address is available. 
The PCERR register remains locked until trapl is cleared in the primary cache status 
register (POSTS). 
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The PCERR register also provides visibility into the refresh counter and refresh timer. 
An IPR write (MTPR) to the PCERR register updates the refresh counter and timer. An 
IPR write to the PCERR register loads the refresh counter with bits <8:3> of the data, 
and the refresh timer with bits <15:9> of the data. 

An IPR read (MFPR) of the primary cache error address register (PCERR) reads the error 
address out if trapl (PCSTS<7>) is set. If trapl is not set, an IPR read is used to read 
the refresh timer in bits <15:9> and the value of the refresh counter in bits <8:3>. 

Access to the refresh counter and refresh timer is provided for diagnostics only. 

Figure 4-6 shows the format for the primary cache error address register. 
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Figure 4-6 Primary Cache Error Address Register (PCERR)— {'PR 126,0 ^E^g ) 

If enable_refresh (PCSTS<3>) is set, a read of the refresh timer and counter (through the 
PCERR register) following an IPR write to the timer and counter will result in a different 
value than the value written. The reason is as follows. 

When the enable_refresh (PCSTS<3>) bit is set, the refresh counter is incremented for 
every NOP operation. The refresh timer is incremented for every cycle during which 
the operation is not a NOP or an IPR write to the PCERR register. Due to the internal 
latency involved in the execution of MxPRs, the count values of the refresh counter and 
timer may change. 

To keep the count values of the refresh counter and timer unchanged, the enable_refresh 
(PCSTS<3>) bit should be cleared. 

4.1.2.5.3 Primary Cache Index Register (PCIDX)— IPR 125 

The primary cache index register (PCIDX) provides the mechanism for reading and 
writing the tag array of the primary cache. During IPR (MTPR) writes to the primary 
cache tag array register (PCTAG) (Section 4.1.2.6), the contents of the PCIDX register 
are used to index the desired tag entry in the array. Therefore, the PCIDX register must 
be written with the desired index before performing an IPR write (MTPR) to the PCTAG 
register. 

Figure 4—7 shows the format of this register. 



64 Cache and Main Memory 



1 1 

1 



3 2 



I MBZ 


Tag Array Index 


MBZ 



Figure 4-7 Primary Cache Index Register (PCIDX)— (IPR 125,o 7Di6 ) 

4.1.2.5.4 Primary Cache Tag Array Register (PCTAG)— IPR 124 

The primary cache tag array register (PCTAG) is a 32-bit logical register that provides 
the mechanism for reading and writing the tag array of the primary cache. 

Figure 4-8 shows the format for this register. 
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Figure 4-8 Primary Cache Tag Array Register (PCTAG)— (IPR 124^0 ^Cie ) 

4.1.2.6 Writing and Reading the Primary Cache Tag Array 

During an IPR read/write of the primary cache tag array register (PCTAG), the primary 
cache index register (PCIDX) supplies the index for the tag entry to be accessed. To 
write a tag entry in the primary cache, first the index of the tag entry is written in the 
PCIDX register by issuing an MTPR. Then an MTPR is issued for the primary cache 
tag array register (PCTAG), with the desired value of the valid bit, parity bit, and tag 
address<28:ll> in data bits<31:30> and <28:11>. 

In order to read a tag entry in the primary cache, the index of the tag entry is written in 
the PCIDX register by issuing an MTPR instruction. Then an MFPR instrcution is issued 
for the primary cache tag array register (PCTAG). 

4.1.2.7 Primary Cache Error Recovery 

When an error is detected in the primary cache, the primary cache latches error 
information in the PCSTS and PCERR registers, then becomes disabled. The exact 
type of error can be determined from the information in the PCSTS register and the way 
the error was reported. 

If the error was a tag parity error, the entire tag store must be written with "invalid tag 
with good parity." The PCERR register contains the address of the tag in error only if the 
tag parity error is reported as a machine check. 

For all other errors, the primary cache should simply be flushed by wriiting 1 to the 
flush_cache bit in the primary cache status register (PCSTS<2>). 

To complete error recovery, the primary tag store in the C-chip should be flushed and the 
error bits should be cleared in the PCSTS. The primary cache should be enabled if the 
error rate is such that the primary cache would remain disabled. The pirimary tag store 
in the C-chip must also be disabled. 
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The following is the recommended sequence for bringing the primary cache back to 
normal operation: 

1. Save the primary cache status register. 

2. Save the primary cache error address register. 

3. If the error was a tag parity error, write all tags in the primary cache, as follows: 

1. Write the primary cache index register with the next index. 

2. Write the primary cache tag array register with tag = (arbitrarily chosen), 
parity = (odd parity for chosen tag value), and valid = 0. 

4. Flush the primary tag store in the C-chip by writing a to the backup cache flush 
primary tag store (BCFPTS) register (IPR 122). 

5. Logically OR the flush_cache bit (<2>) into the saved value of the primary cache 
status register, then write the resulting value back into the primary cache status 
register. This step clears any error bits that were set, flushes the cache, and enable 
its if it was enabled before. 

4.1.2.8 Primary Cache Initialization 

At power-up, the primary cache must be initialized. The console firmware should load 
the primary cache status register (POSTS) with the desired values for the force_hit, 
enable_PTS, and enable_refresh bits. The firmware should clear the interrupt, trapl, and 
trap2 bits in the PCSTS register. The firmware should also invalidate the entire primary 
cache by issuing an IPR write ,(MTPR) to PCSTS, writing a 1 in bit <2> (flush_cache). 
Then each tag store entry should be loaded with an invalid tag with good parity. Each 
entry may be written with a write to PCIDX, followed by a write to PCTAG. 

4.1.2.9 Primary Cache Diagnostics 

The primary cache may be tested by reading and writing tags with PCIDX and PCTAG. 
Error detection may be tested by constructing an error and then reading the state from 
PCSTS and PCERR. The primary cache refresh counter and timer may be tested by 
reading and writing the primary cache error register (PCERR). 

4.1.2.10 Error Handling by the Primary Cache 

The primary cache is responsible for latching any error signals that occur for the 
following: 

• Primary cache tag parity error 

• Primary cache data parity error 

• RDAL data parity error 

• RDAL bus error 

• F-chip result parity error 

The latter four errors are detected by the CPU (P-chip). Errors; are reported in one of two 
ways: as a soft error interrupt at IPL lA le, or as a machine check. 

When an error is detected, the primary cache sets trapl, trap2, or the interrupt bit in the 
primary cache status register (PCSTS) and conditionally latches other bits to indicate the 
type of error. When trapl, trap2, or the interrupt biut are set in the PCSTS register, the 
primary cache is automatically disabled. 
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Primary cache tag parity errors are reported if a tag parity error is detected during a 
read, write, or invalidate reference; and if the primary cache status regiister has not been 
already locked by a previous error (for example, enable_PTS = 1, trapl = 0, trap2 = 0, 
interrupt = 0, and force_hit = 0). Tag parity errors are always reported as an interrupt. 
If the reference was a D-stream read that hit, the error is also reported as a machine 
check. 

Primary cache data parity errors are reported if a data parity error is dietected during a 
read reference that hit in the primary cache (unless force_hit (PCSTS<0>=1). Primary 
cache data parity errors are reported as a machine check if the reference was a D- 
stream read. If the reference was an I-stream read, primary cache data parity errors are 
reported as an interrupt. 

RDAL data parity errors are reported if a data parity error is detected during a non- 
I/O space read reference that missed in the primary cache. RDAL data parity errors 
detected on the requested longword of a D-stream read are reported as a machine check. 
RDAL parity errors detected on the nonrequested longword of a D-stream read, or on 
either longword of an I-stream read, are reported as an interrupt. 

RDAL bus errors are reported if a read, write, or clear write buffer command is 
terminated with an error (RDAL bus signal ERR_L asserted). Bus errors detected 
during D-stream read, write, or clear write buffer commands are reported as a machine 
check. Bus errors detected during an I-stream read are reported as an interrupt. 

NOTE 

RDAL bus errors may also be reported for an EPR read or read interrupt vector 
command that is terminated with the ROAL signal ERR_L. In those cases, 
however, the PCSTS register does not lock and the CPU processes the error 
entirely by microcode, with no error reported to the software. 

F-chip result parity errors are reported if a data parity error is detected during a 
result transfer from the F-chip. Result parity errors are always report<3d as a machine 
check. 

Errors reported as interrupts do the following: 

• Set the interrupt bit (PCSTS<5>). 

• Update bits PCSTS<12:8> with information describing the error. 

However, if either interrupt or trapl is already set when the error is detected, bits 
PCSTS<12:8> are not updated. Bits PCSTS<12:8> reflect the first error detected. 

Errors reported as a machine check do three things: 

• Set trapl in the primary cache status register (PCSTS). 

• Update bits PCSTS<12:8>. 

• Load the primary cache error address register (PCERR). 

However, if trapl is already set when the error is detected, trap2 is set and neither bits 
PCSTS<12:8> nor the PCERR register are updated. This causes bits PCSTS<12:8> and 
the PCERR register to reflect the first error detected. Note that the state corresponding 
to the machine check overwrites any information latched due to a pre\dous interrupt. 
It is assumed that errors reported as a machine check are more important than those 
reported as an interrupt. 
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In the CPU, primary cache data parity errors are reported only if the read reference hits 
in the cache. However, primary cache tag parity errors are reported whenever the error 
is detected. The following are two reasons for this inconsistency: 

1. Primary cache tag entries can be directly written without any side effects, using 
MTPR macro instructions. There is no direct and easy way of writing the primary 
cache data array. 

2. If primary cache tag parity errors are reported only under hits, there is a possibility 
that a stuck-at fault in the tag array might not get detected for a long time. 
Meanwhile, the system will run at degraded performance. This is undesirable. 

Figure 4-9 shows the resulting status register values for each error type. 
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Figure 4-9 Primary Cache Detectable Single Errors 

Notes: 

1. In all of these cases, it is assumed that enable_refresh (PCSTS<3>) is set to 1 and 
force_hit (PCSTS<0>) is set 0. This is the normal state of the cache, and other states 
may change the way errors are reported. 

2. The primary cache must be enabled to get a primary cache tag or data parity error. 
The primary cache may or may not be enabled when a DAL data parity error, RDAL 
bus error, or an F-chip result parity error is detected. 
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3. Primary cache tag parity errors always cause an interrupt request. If the error was 
the result of a D-stream read that hit, a microtrap is also started. 

4. If a read transaction is terminated by ERR_L, data parity is ignored. Therefore, the 
RDAL data parity error bit in the status register is never set for a read terminated in 
ERR_L. 

5. B_cache_hit is always loaded when an error is detected. However, primary cache 
tag and data parity errors are detected as part of a primary cache reference, so the 
B_cache_hit is always be a for those errors. 

6. Commands that have error detection inhibited do not set trapl, trap2, and the 
interrupt bit in the primary cache status register. For example, tag parity errors are 
inhibited for commands that do not access the tag store. Similarly, RDAL bus errors 
are not reported for EPR read, EPR write, or read interrupt vector transactions 
terminated by ERR_L; those commands are handled specially by the microcode. 

The resulting values shown in Figure 4-9 assume that trapl, trap2, and the interrupt 
bit are all when the error is detected. In that case, bits PCSTS<12:8> are updated as 
shown. If trapl, trap2, or the interrupt bit are 1 when the error is detected, bits are 
updated as shown in Figure 4—10. 
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Figure 4-10 Primary Cache Detectable Double Errors 



4.1.3 Backup Cache Overview 

The backup cache is 128 kilobytes, direct-mapped, quadword access size, with an 
octaword fill (subblock) size, and a 4-octaword allocate (block) size. The cache is read- 
allocate, no-write-allocate, and write-through. 

Because the data bus (D_BUS) is 8 bytes wide, the cache RAMs are organized as 8 bytes 
wide by 16K locations deep. There are also 8 bits of parity (1 bit correisponding to each 
data byte). Fourteen bits of address are needed to access the cache. Bits <16:3> of the 
VAX physical address are used as the cache index. 
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When returning data to the primary cache, the backup cache returns a quadword. This 
is the fill size of the primary cache. 



4.1.3.1 Backup Cache Organization 

The backup cache tag store is organized such that one tag and four valid bits 
correspond to each four-octaword block of the cache. Each valid bit corresponds to 
one octaword subblock. When a cache tag miss occurs on a read, a block is allocated, 
a subblock is filled, and the corresponding valid bit is set. When a cache tag compare 
is successful but the valid bit is not set, a subblock is filled from memory, and the 
corresponding valid bit is set. Figure 4-11 shows the backup cache organization. 
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Figure 4-11 Tag and Valid Bits as They Correspond to Backup Cache Data 

4.1.3.2 Backup Cache Address Translation 

The physical addresses supplied to the backup cache consist of 28 bits (address<29:2>). 
Bits <5:4> of the physical address select one of the four valid bits that cover two 
quadwords in a backup cache row, as shown in Figure 4-11. 

There are 16K quadwords of data. Fourteen bits of the address (<16:3>) select one 
quadword. Because there are 2K tag entries (one tag covers 8 quadword data entries), 
11 bits of the address (<16:6>) are used to select one tag. Bits <28:17> are stored as tags 
in the backup cache. Bit <29> of the address specifies I/O space; this bit is not used, 
because I/O space addresses are not cached. 

On noncacheable references, the reference is never stored in the cache. Therefore, a 
backup cache miss occurs and an octaword reference is generated on the RDAL bus. 

Whenever the CPU requires an instruction or data not found in the primary cache, the 
contents of the backup cache is checked to determine if the referenced location is stored 
there. The cache contents are checked by translating the physical address as shown in 
Figure 4-12. 
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Figure 4~12 Backup Cache Physical Address Ttanslatlon 
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4.1.3.3 Backup Cache Data Block Allocation 

On cacheable references that miss the primary cache, a quadword read is initiated on the 
RDAL bus. If the requested quadword cannot be found in the backup cache: 

• An octaword is provided by the main memoiy controller. 

• Both caches allocate a data block for storing the data. (The primary cache allocates 
and fills a quadword; the backup cache allocates 4 octawords but only fills 1 octaword. 

• The requested quadword is passed on to the CPU. 

Since the KA670 supports 512 megabytes (32 mega -octawords) of physical memory, up 
to 4K octawords share each data block (8 quadwords) of the cache. Contigruous programs 
larger than 128 kilobytes, or noncontiguous programs separated by 128 kilobytes, will 
overwrite themselves in the backup cache when cache data blocks are allocated. 

4.1.3.4 Backup Cache Behavior on Writes 

On CPU-generated write references, the backup cache is write through. All CPU write 
references that hit the backup cache cause the contents of the referenced location in main 
memory to be updated as well as the copy in the cache. 

On DMA write references that hit the cache, the cache entry containing the copy of the 
referenced location is invalidated. 

4.1.3.5 Backup Cache External Processor Registers 

Several C-chip registers may be accessed using EPR reads (MFPRs) and EPR writes 
(MTPRs). The following sections detail the structure of the registers and how the access 
of the registers is accomplished. During the EPR access, RDAL address bits <10:3> tell 
which EPR is being accessed. 

The C-chip contains some vector registers that are not used on the KA670 module, since 
it does not have a vector processor. This manual discusses only one of these registers 
briefly, the vector interface error status register (VINTSR). Table 4-3 lists the C-chip 
EPR registers and their numbers. 

Table 4-3 Backup Cache External/Internal Processor Registers 



Register Name 



Mnemonic 



EPR Number 



Hex Decimal 



Type 



C-Chip Nonvector Registers 

Backup cache tag store 
Primary tag store, first half 
Primary tag store, second half 
Refresh register 
Index register 
Status register 
Control register 
Error address register 
Flush backup tag store 
Flush primary tag store 



BCBTS 


71 


113 


Read/write 


BCPITS 


72 


114 


Read/write 


BCP2TS 


73 


115 


Read/write 


BCRFR 


74 


116 


Read/write 


BCIDX 


75 


117 


Read/write 


HOSTS 


76 


118 


Read/write 


BCCTL 


77 


119 


Read/write 


BCERR 


78 


120 


Read only 


BCFBTS 


79 


121 


Write only 


BCFPTS 


7A 


122 


Write only 
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The following sections show the contents of each register. 

4.1.3.5.1 Backup Cache Backup Tag Store (BCBTS)— EPR 113 

The backup cache backup tag store (BCBTS) register is used to access the backup cache 
tag store, valid bits, and parity bits. The tag store tag, valid bits, and parity may be 
written explicitly using an EPR write (MTPR) of the BCBTS register; they may be read 
using an EPR read (MFPR) of the BCBTS register. 

Figure 4-13 shows the format for the register. Table 4-4 lists bit descriptions. 

On an EPR read of the BCBTS register, the C-chip responds according to the format 
in the figure. The backup tag store row and column index fields in the backup cache 
index (BCIDX) register bits <16:6> are used as the index to the tag array So the BCIDX 
register must have been previously written using an EPR write (MTPR), to ensure 
predictable results from the EPR read (MFPR) of the BCBTS register. 

On an EPR write of the BCBTS register, the C-chip writes the data into the tag store 
according to the format shown in the next figure. The backup tag store row and column 
index fields of the BCIDX register are used as the index to the tag arraiy So the BCIDX 
register must have been previously written using an EPR write (MTPR), to ensure 
predictable results from the EPR write (MFPR) of the BCBTS register. 
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Figure 4-13 Backup Cache Backup Tag Store Register (BCBTS)— (EPR ll3,o7li6 ) 
Table 4-4 Backup Cache Backup Tag Store Register Bits 



Data Bit 



Name 



<31:30> 


MBZ 


<29> 


Parity bit 


<28:17> 


B-cache tag 


<16:6> 


MBZ 


<5:2> 


Four valid bits 


<0:1> 


MBZ 



Description 



Read as 0. Writes ignored. 

Read/write. The parity bit corresponding to the odd parity, as 
calculated on the tag. 

Read/write. Backup cache entry tag. The tag portion of the tag 
store entry. 

Read as 0. Writes ignored. 

Read/write. The four valid bits of the tag store entry. 

Read as 0. Writes ignored. 



Table 4-6 shows the correspondence between bits BCBTS<5:2>, the valid bit selected by 
physical address bits <5:4>, and the subblock number in the tag store. 
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Table 4-5 Tag Store Subblock Numbers 



BCBTS Bit Set 



Address <5:4> 



Subblock Number 



2 
3 

4 
5 



00 
01 
10 
11 



1 
2 
3 

4 



4.1.3.5.2 C-Chip's Primary Cache Tag Store Access, Using BCPITS and BCP2TS, EPR 
114 and 115 

Figure 4-14 defines the format of the C-chip's copy of the primary cache tag store. 
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Figure 4-14 Tiie Primary Cache Tag Store— C-Chip Copy 

The backup cache primary tag store contains one tag and one valid bit for each quadword 
block in the primary cache. There are 256 quadword blocks in the primary cache, so the 
primary tag store contains 256 entries of 20 bits each. Each entry consists of an 18-bit 
tag (bits <28:11> of the physical address), one valid bit, and one parity bit. 

Figure 4-15 defines the format of the VAX physical address as used in the C-chip's 
primary tag store addressing during external processor operations. The C-chip copy of 
the primary tag store is organized in two banks, with 32 rows and 4 columns each. The 
tag store row is indexed using bits <8:4> of the address. The tag store column is indexed 
using bits <10:9> of the address. On a primary tag store access, both halves of the tag 
store are accessed and a hit is calculated separately in each half. 
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Figure 4-15 VAX Physical Address in C-Chip's Primary Tag Store Addressing (EPR 
Operations) 

The tag store tag, valid bit, and parity may be written explicitly using an EPR write 
(MTPR) of the tag store; they may be read using an EPR read (MFPR) of the tag store. 

EPR 114 (BCPITS) is the access to the first bank of the C-chip's copy of the primary tag 
store. EPR 115 (BC2TS) is the access to the second bank. 

On an EPR read (MFPR) of the C-chip's copy of the primary tag store, the C-chip 
responds by driving the data bus according to the format shown in Fifpire 4-16. The 
primary cache tag store row and column index fields of the backup cache index (BCIDX) 
register, bits <10:4>, are used as the index to the tag array. So the BCIDX register must 
have been previously written using an EPR write (MTPR), to ensure predictable results 
from the EPR read (MFPR) of the tag store. 

On an EPR write (MTPR) of the C-chip's copy of the primary tag store, the C-chip writes 
the contents of the data bus into the tag store according to the format in the next figure. 
Again, the primary cache tag store row and column index fields of the BCIDX register 
are used as the index to the tag array. So the BCIDX register must have been previously 
written using an EPR write (MTPR), to ensure predictable results from the EPR write 
(MTPR) of the tag store. Table 4-6 lists the bit descriptions of the primary tag store 
register. 
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Figure 4-16 Data Bus Format to Access the Primary Tag Store (C-Chip Copy) 
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Table 4-6 Primary Tag Store Register Bits 



Data bit 



Name 



Description 



<31:30> 


MBZ 


<29> 


Parity bit 


<28:11> 


Cache entry tag 


<10:3> 


MBZ 


<2> 


Valid bit 


<1:0> 


MBZ 



Read as 0. Write as 0. 

The parity bit corresponding to the odd parity as 
calculated on the tag. 

The tag portion of the tag store entry. 

Read as 0. Write as 0. 

The valid bit of the tag store entry. 

Read as 0. Write as 0. 



4.1.3.5.3 Baclcup Cache Refresh Register (BCRFR)— EPR 116 

The backup cache refresh pointer register (BCRFR) contains separate addresses to 
refresh the backup tag store and the primary tag store. Bits BCRFR<16:9> contain the 
backup tag store refresh address, which corresponds to the backup tag store row index. 
Bits BCRFR<8:4> contain the primary tag store refresh address, which corresponds to 
the primary tag store row index. Both tag stores are refreshed at the same time, when 
the contents of the register is written with an MTPR. Figure 4-17 shows the format for 
the BCRFR register. Table 4-7 lists bit descriptions. 

When the enable_refresh status bit (BCCTL<3>) is set and a refresh is done, each refresh 
address field is incremented separately. In this manner, the C-chip's primary tag store is 
completely refreshed after 32 refresh microcycles, and the backup tag store is completely 
refreshed after 256 refresh microcycles. 

When the enable.refresh bit (BCCTL<3>) is not set, the refresh addresses are only 
changed explicitly through an EPR write (MTPR). The tag store rows are only refreshed 
when they are accessed explicitly through reads, writes, EPR reads, or EPR writes. In 
addition, the BCRFR register is used instead of the backup cache index (BCIDX) register 
to access the backup tag store and the C-chip's primary tag store during EPR operations 
on those registers. 

The BCRFR register may be written using an EPR write (MTPR) or read using EPR read 
(MFPR). If enable_refresh (BC(TrL<3>) is set when the EPR operation is done, the result 
of the operation is unpredictable. 
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Figure 4-17 C-Chip Refresh Register (BCRFR)— <EPR ll6,o 74)6 ) 



76 Cache and Main Memory 



Table 4-7 C-Chip Refresh Register Bits 



Data Bit 


Name 


<31:17> 


MBZ 


<16:9> 


Backup cache tag store 
refresh address 


<8:4> 


Primary cache tag store 
refresh address 



Description 



<3:0> 



MBZ 



Read as 0. Write as 0. 

This field contains the row adclress of the backup 
tag store. The field is incremented each time a 
refresh is done, if enable_refresh (BCCTL<3>) is 
set. 

This field contains the row address of the primary 
cache tag store. The field is incremented eeich time 
a refresh is done, if enable_refresh (BCCTL<3>) 
is set. Note: both halves of the C-chips' primary 
cache tag store are refreshed. 

Read as 0. Write as 0. 



4.1.3.5.4 Bacltup Cache Index Register (BCiDX)— EPR 117 

The backup cache index register (BCIDX) is used to access the backup tag store and the 
C-chip's copy of the primary tag store through EPR reads (MFPR) and writes (MTPR). 
When the backup tag store is accessed, the bits that correspond to the backup tag store 
index are used. When the primary tag store is accessed, the bits that correspond to 
the primary tag store index are used. Figures 4-18 and 4—19 show the formats for the 
backup and primary tag store registers, respectively. Tables 4-8 and 4-9 list the bit 
descriptions. 

The entire BCIDX register may be read using an MFPR, while writes (MTPR) to BCIDX 
only modify bits <16:4>. 



Unused 



1 1 
7 6 



9 8 6 5 



Unused 



Backup Tag Store Column Index 
Backup Tag Store Row Index 



Figure 4-i8 Baclcup Cache Index Register as Used for Bacltup Cacihe Tag Store 
Table 4-8 Backup Cache Index Register as used for Backup Cache lag 



Data Bit 



Name 



Description 



<31:17> 
<16:9> 



<8:6> 



<5:0> 



Unused 

Backup tag store row index 



Backup tag store column 
index 



Unused 



Read as 0. Writes ignored. 

This field is used as the backup tag store row 
index during an EPR read (MPPR) or an EPR 
write (MTPR) of the backup tag store (through the 
use of BCBTS (EPR 113)). 

This field is used as the backup tag store column 
index during an EPR read (MFPR) or an EPR 
write (MTPR) of the backup tag store (though the 
use of BCBTS (EPR 113)). 

Read as 0. Writes ignored. 
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Unused 



Unused 



Primary Tag Row Store Index 
Primary Tag Column Store Index 



Figure 4-19 Backup Cache Index Register as Used for Prinrtary Cache Tag Store 



Table 4-9 Backup Cache Index Register as Used for Primary Cache 



Data Bit 



<31:11> 
<10:9> 



<8:4> 



<3:0> 



Name 



Description 



Unused 

Primary tag store column 
index 



Primary tag store row index 



Unused 



Read as 0. Writes ignored. 

This field is used as the primary tag store column 
index during an EPR read (MFPR) or an EPR 
write (MTPR) of the backup tag store (through the 
use of BCPITS or BCP2TS). 

This field is used as the primary tag store row 
index during an EPR read (MFPR) or an EPR 
write (MTPR) of the backup tag store (through the 
use of BCPITS or BCP2TS). 

Read as 0. Writes ignored. 



4.1.3.5.5 Backup Cache Status Register (BCSTS)— EPR 118 

The backup cache status (BCSTS) register may be read using an EPR read (MFPR). 
All bits are writable only by hardware, with the exception of statusjock (BCSTS<0> 
which may be cleared using an EPR write (MTPR). Figure 4-20 shows the format for the 
BCSTS register. Table 4-10 lists bit descriptions. 

During normal operation, the BCSTS register is loaded during every memory read or 
memory write RDAL transaction, when the backup tag store is accessed and parity is 
calculated. The BCSTS register is loaded during DMA transactions recognized by the 
C-chip — specifically, DMA cache fill and memory write. In addition, the BCSTS register 
is loaded during every microcycle used to service an invalidate bus (I bus) request. 

The BCSTS register load is disabled when the statusjock (BCSTS<0>) bit is set. In 
addition, the error address register load is disabled and both tag stores are disabled 
when the statusjock bit is set. The statusjock bit is set if one of the tag stores produces 
a parity error or if a RDAL bus error occurs. This allows the CPU to examine the state 
the C-chip was in when the error occurred. The statusjock (BCSTS<0>) bit is only 
cleared through an EPR write (MTPR) of the BCSTS register. 
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Status_Lock 

BTS_Parity_Err 

PlTS_Parity_Err 

P2TS_Parity_Err 

Bus_Err 

BTS_Compare 

BTS_Hit 

P1TS_Hit 

P2TS_Hit 

RDAL_Cmd<3:0> 

IBUS_Cycle 

PRED_Parity 



Figure 4-20 Backup Cache Status Register (BCSTS)— (EPR ll8io 76|6 } 



Tabie 4-10 Baci(up Cache Status Register Bits 



Data Bit 



Name 



Description 



<31:27> 
<26> 

<25> 



<20> 



<19> 



<18> 



<17> 



MBZ 
Pred_parity 

Ibus_cycle 



<24:21> RDAL cmd<3:0> 



P2TS_hit 



PlTShit 



BTShit 



BTS_compare 



Read as 0. Writes ignored. 

Predicted parity. The output of the predicted 
parity generator is loaded into this bit whenever 
the BCSTS register is loaded. 

Invalidate bus cycle. This bit is set when the 
BCSTS register is loaded during a microcycle 
dedicated to servicing an invalidate bus (I-bus) 
request. 

RDAL bus command type. This field stores the 
last non-EPR RDAL command. The field is 
unpredictable if the IBUS_CYCLE (<25>) bit is 
set. 

Primary tag store 2nd bank hit. This field stores 
the result of the hit calculation from the last access 
of the second half of the primarj' tag store. 

Primary tag store 1st bank hit. This field stores 
the result of the hit calculation from the last access 
of the first half of the primary tag store. 

Backup tag store hit. This field stores the result of 
the backup tag store hit calculation from the last 
backup tag store access. 

Backup tag store. This field stores the result of 
the tag comparison fi-om the last backup tag store 
access. 



<16:5> 



MBZ 



Read as 0. Writes ignored. 
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Table 4-10 (Com.) Backup Cache Status Register Bits 



Data Bit 



Name 



Description 



<4> 



BUS ERR 



<3> 



P2TS_parity_eiT 



<2> 



PlTS_parity_err 



<1> 



BTS_parity_err 



<0> 



Statusjock 



RDAL bus error. This bit is set when an error 
occurs on the RDAL that may corrupt the cache 
RAM data. These errors may occur during read 
miss, write, or fill transactions. Such an error 
would not happen during a read to I/O space. See 
the section on Errors for more detail. 

When bus_err is set, statusjock (BCSTS<0>) is 
also set, which disables the backup tag store and 
the primary tag store copy. bus_err is cleared 
when the statusjock bit is cleared through an 
EPR write (MTPR), and also during reset. 

Primary tag store 2nd bank parity error. This bit 
is set when a parity error occurs in the second half 
of the primary tag store. The bit is not loaded into 
the status register unless enable_PTS (BCCTL<2>) 
is set. When P2TS_parity_err is set, statusjock 
(BCSTS<0>) is also set. P2TS_parity_err is cleared 
when the STATUS_LOCK bit is cleared through an 
EPR write (MTPR), and also during reset. 

Primary tag store 1st bank parity error. This bit 
is set when a parity error occurs in the first half 
of the primary tag store. The bit is not loaded into 
the status register unless enable_PTS (BCCTL<2>) 
is set. When PlTS_parity_err is set, statusjock 
(BCSTS<0>) is also set. PlTS_parity_err is cleared 
when the STATUS_LOCK bit is cleared through an 
EPR write (MTPR), and also during reset. 

Backup tag store parity error. This bit contains 
the result of the last access of the backup tag 
store. The bit is set when a parity error occurs in 
the backup tag store. The bit is not loaded into the 
BCSTS register, unless enable.BTS (BCCTL<1>) 
is set and force_Bhit (BCCTL<0>) is not set. When 
BTS_parity_err is set, statusjock (BCSTS<0>) 
is also set. BTS_parity_err is cleared when the 
statusjock bit is cleared through an EPR write 
(MTPR), and also during reset. 

This bit is set by hardware when a parity error 
occurs in either the backup tag store or the 
primary tag store, or when an RDAL bus error 
occurs. Setting this bit locks the BCSTS register 
and the backup cache error address register 
(BCERR) against further modification until status, 
lock is cleared. Both tag stores are disabled when 
the statusjock bit is set. 

The bit is cleared by an EPR write (MTPR) of 
the BCSTS register, using the format shown in 
Figure 4-20. A 1 must be written to the status_ 
lock location in order to clear this bit. The status, 
lock bit is the only externally-writable bit in the 
register. When the statusjock bit is cleared, 
bus_enr, BTS_parity_err, PlTS_parity_err and 
P2TS..parity_erT are cleared as well, statusjock is 
cleared during reset. 
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The following list provides some information on interpreting the contents of the status 
register: 

• Ibus_cycle bit is set: The RDAL command field (BCSTS<24:21>) is unpredictable 
since an RDAL command is not necessarily being processed during an invalidate bus 
cycle. The hit and error fields show the results from the access of the backup and 
primaiy tag stores. 

• RDAL_cmd is a memoiy read or write: The results of the backup cache tag store 
access are given by BTS jparity_err, BTS_hit, and BTS_compare. The results of the 
primary tag store access are given by PlTS_hit and P2TS_hit. The primary tag store 
error bits have no meaning and are 0, because parity is not calculated on the contents 
of the primary tag store copy during these transactions; thus, the primary tag store 
error bits are not loaded. 

• RDAL_cmd is a DMA cache fill or memory write with DMG asserted: The 

results of the read of both tag stores are contained in the status bits. 

Note that it is not possible to tell if DMG was asserted using the contents of the 
BCSTS register. 

Table 4-11 summarizes which bits are loaded during each C-chip transaction. 
Table 4-11 Status Bits Loaded In BCSTS During C-Chip Transactions 

All other 
Cycle lype Loaded BTS Error Bit Loaded PTS Error Bit Loeided Bits 

No Yea 

No Yes 

Yes Yes 

Yes Yes 

Yes Yes 

No No 

4.1.3.5.6 Backup Cache Control Register (BCCTL)— EPR 119 

The backup cache control register (BCCTL) contains several control bits that allow logic 
external to the C-chip to control the actions of the C-chip. The register may be read using 
an EPR read (MFPR). The register may be written using an EPR write (MTPR). All the 
bits are written at once, so all bits must contain valid data when the EPR write is issued. 

Three bits of the register are hardware-writable: enable_BTS (BCCTL<1>), enable_ 
PTS(BCCTL<2>), and force_Bhit(BCCTL<0>). The bits are only written by hardware 
when RESET_L is asserted; they are written as shown in Figure 4-21. Table 4-12 lists 
the bit descriptions. 



Read 


Yes 


Write 


Yes 


DMAfiU 


Yes 


DMA write 


Yes 


I-bu8 


Yes 


EPR read/write 


No 
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Rgure 4-21 Backup Cache Control Register (BCCTL)— (EPR ll9,o 77^6 ) 
Table 4-12 Backup Cache Control Register Bits 



Data Bit 



Name 



<31:5> 
<4> 



MBZ 
Two_cycle_RAMs 



<3> 



Enable_refresh 



Description 



Read as 0. Write as 0, 

This bit indicates the speed of the cache RAMs, so the 
C-chip knows how many microcycles are needed to access 
the RAMs. For the KA670, the console macrocode should 
set this bit to 0, which means it does not take extra 
microcycles to access the backup cache RAMs. For 
example, no slip cycles are needed. When the backup 
cache is enabled, two_cycle_RAMs should be the same 
in the C-chip control register and the memory interface. 
(See Section 4.2.1.3.6) 

When this bit is 1, the automatic refresh proceeds 
normally; each time a refresh is done, the refresh counter 
is incremented. When the bit is 0, automatic refreshing 
of the tag stores is disabled, and the backup cache refresh 
register (BCRFR) incrementer is disabled. The refresh 
register may drive the invalidate address bus (lA bus, 
internal to the C-chip), but the refresh counter will never 
be incremented. This enables explicit control of the 
BCRFR register through EPR writes (MTPR). 

Beware that tag store data may be corrupted if each 
row of each tag store is not refreshed at least once every 
millisecond. In addition, if enable_refresh (BCCTL<3>) is 
not set, the BCRFR register is used instead of the backup 
cache index (BCIDX) register during EPR accesses of the 
primary tag store and the backup tag store. This feature 
allows testing of the path from the BCRFR to the tag 
stores. 
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Table 4-12 (Cont.) Backup Cache Control Register Bits 



Data Bit 



Name 



<2> 



Enable.PTS 



<1> 



Enable BTS 



Description 



Enable primary tag store. When this bit is clear, the 
C-chip copy of the primary tag store is disabled. Primary 
cache tag store parity errors are not loaded into the 
backup cache status (BCSTS) register and do not cause 
the assertion of SERR_IRQ_L as normal. 

Enable_PTS is cleared by hardware only when RESET_L 
is asserted. Enable_PTS must be set when the CPU's 
primary cache is enabled, to ensure proper invalidate 
filtering. While the primary tag store is disabled, its 
contents may change as a result of F^DAL operations. 
If the primary tag store has been disabled, it must be 
flushed through an EPR write (MTPR) of the backup 
cache flush primary tag state (BCFPTS) register before 
it is reenabled, to ensure correct operation. The CPU 
primary cache must also be flushed. 

Enable backup tag store. When this bit is clear, the 
backup cachie is disabled. All reads produce a cache miss; 
no writes are done. When the bit is clear, the backup 
tag store does not contribute to the calculation of an 
invalidate hit on the I-bus; in other words, only the access 
of the primary cache produces an invalidate hit. Backup 
cache tag store parity errors are not loaded into the 
backup cache status (BCSTS) registtT and do not cause 
the assertion of SERR_IRQ_L as normal. 

Enable_BTS is cleared (reset to 0) by hardware only 
when RESET_L is asserted. Enable.BTS should not 
be reset to during normal operation. If force_Bhit 
(BCCTL<0>) is set and enable_BTS (BCCTL<1>) is clear, 
the response of the backup tag store is unpredictable. 
While the backup tag store is disabled, its contents may 
change as a result of RDAL operations. If the backup tag 
store has been disabled, it must be flushed through an 
EPR write (MTPR) of the backup cache flush backup tag 
store (BCFBTS) before it is reenabled, to ensure correct 
operation. 
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Table 4-12 (Cont.) Backup Cache Control Register Bits 

Data Bit Name Description 

<0> Porce_Bhit Force backup hit. When this bit is set, all non-I/O space 

backup tag store accesses produce a cache hit, including 
readjock accesses. Backup cache tag store parity errors 
are not reported. All I-bus requests result in an invalidate 
hit, regardless of the contents of the backup tag store. 

If enable_BTS (BCCTL<1>) is clear and force_Bhit 
(BCCTL<0>) is set, the backup tag store response is 
unpredictable. If a primary tag store parity error occurs, 
causing statusjock (BCS're<0>) to be set, the backup 
cache is not disabled as normal; the force_Bhit condition 
overrides the statusjock condition. Similarly, the backup 
cache is not disabled if a bus_err (BCCTL<4>) occurs, 
causing statusjock to be set; the force_Bhit condition 
overrides the statusjock condition. 

When the C-chip is in force_Bhit mode, the cache RAM 
data is written for each non-I/O space memory write and 
read on every non-I/O space memory read. The state of 
the backup tag store, however, is unpredictable; it must be 
flushed before it is returned to normal mode. The backup 
tag store must also be initialized, if this has not occurred 
yet. Force_Bhit is cleared during reset and should be set 
to 1 by diagnostics only. 

4.1.3.6 Maintaining Primary Cache Consistency 

Any state change to the primary cache must be reflected in the C-chip copy of the 
primary tag store. During normal operation, this is done automatically by the C-chip 
when a cacheable read occurs. If the CPU copy of the primary cache is flushed, the 
C-chip copy of the primary tag store should also be flushed. 

When the primary cache is turned off, the state of the C-chip copy of the primary tag 
store is irrelevant. If the C-chip copy is enabled, some I-bus requests may generate 
invalidates on the RDAL as a result of valid bits that were set in the C-chip copy of the 
primary tag store. Those invalidates are inconsequential to the CPU, since the primary 
cache is turned off and will be flushed when turned back on. 

If the C-chip copy is disabled, accessing the primaiy tag store copy never causes an I-bus 
invalidate hit. As a result, the memory interface does not generate any invalidates for 
the primary cache on the RDAL. Therefore, the state of the C-chip copy of the primary 
tag store is irrelevant when the primary cache is turned off, although less RDAL traffic 
is generated if the primary cache copy is also disabled. 

Table 4-13 is a matrix showing the proper sequence of events for reenabling a disabled 
tag store. The matrix assumes that each tag store has been properly initialized. It also 
assumes that statusjock (BCSTS<0>) is not set. If statusjock is set, the sequence in 
Chapter 8 should be followed. 
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Table 4-13 Reenabiing a Turned-Off Tag Store 



Bits <2:1> 
in the 
BCCTL 



CPU Primary Cache Ofif 



CPU Primary Cache On 



'^Enable.BTS, Everything is off: 
'^Enable_PTS Flush backup tag store. 

Flush primary tag store. 

Write enable_BTS, enable_PTS. 

Flush and turn on primary 

cache. 



Illegal if the I-bus is being used. 

Primary tag store must be on if the primary 

cache is on. 

If the I-bus is not being used, take the 

actions in the following box. 



'^Enable_BTS, Backup tag store and primary 
Enable_PTS cache are ofF: 

Flush backup tag store. 
Flush primary tag store. 
Write enable_BTS. 
Flush and turn on primary 
cache. 



Backup tag store is off: 
Flush the backup tag store. 
Write enable BTS. 



Enable_BTS, Primary tag store and primary 

Enable_PTS cache are off: 

Flush primary tag store. 

Write enable_PTS. 

Flush and turn on primary 

cache. 



lUegal if the I-bus is being used. 

Primary tag store must be on if the primary 

cache is on. 

If the I-bus is not being used, take the 

actions in the previous box. 



Enable_BTS, Primary tag store is on, and 

Enable_PTS primary cache is off: 

Flush primary tag store. 

Flush and turn on primary 

cache. 



Nornial state. 



4.1.3.6.1 Backup Cache Error Address Register (BCERR)— EPR 120 

The backup cache error address register (BCERR) is a read-only regiiiter. It is loaded by 
hardware every time the backup cache status (BCSTS) reigster is loaded. The BCERR 
register contains the address of the current transaction. The first error causes the 
statusjock (BCSTS<0>) bit to be set; this action locks the BCERR register against 
further writes, regardless of subsequent errors, until the statusjock bit is cleared. 

The error address register may be read using an EPR read (MFPR) according to the 
format shown in Figure 4-22. Table 4-14 lists the bit descriptions. 



3 3 

1 


22222222221111111111 
987654321098765432109876543 


2 1 


Imbz 


Error Address 


MBZ 



Figure 4-22 Bacitup Cache C-Chip Error Address Register —(EPR 120|0 ^S^e) 
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Table 4-14 Backup Cache C-Chip Error Address Register Bits 



Data Bit 



Name 



Description 



<31:30> 
<29:3> 

<2:0> 



MBZ 

Error address 

MBZ 



Read as 0. 

This field contains the physical address of the 
current transaction. 

Read as 0. 



When the BCERR register is loaded during an I-bus transaction, bits BCERR<29> and 
BCERR<3> are both Os. This is because the I-bus only uses bits <28:4> of the physical 
address. The other bits are by default. 

The BCERR register is not microcode-writable. If an EPR write (MTPR) of the BCERR 
register is attempted, the RDAL cycle completes as normal but does not write the 
register. For example, writes of the BCERR register are ignored. 

The address contained in the BCERR register when a BUS_ERR (BCSTS<4>) occurs is 
impredictable. The RDAL error may occur several cycles after the address corresponding 
to the transaction was driven onto the bus. In the meantime, the BCERR register may 
have been overwritten by an I-bus transaction. 

4.1.3.6.2 Backup Cache Flush Backup Tag Store Register (BCFBTS)— EPR 121 

The backup cache flush backup tag store (BCFBTS) register is a write-only register. 
Figure 4-23 shows the register's format. 

An EPR write (MTPR) of the BCFBTS register clears all the valid bits in the backup tag 
store. The C-chip ignores the contents of the RDAL data bus during the transaction. The 
write to the register causes an immediate flush of all the valid bits in the backup tag 
store. 

An EPR read of the BCFTS register causes the C-chip to complete the normal RDAL 
cycle for an EPR read (MFPR). For example, reads of the BCFBTS register return 
unpredictable data. 



3 

1 







Writes: Doesn't Matter 


Reads: Unpredictable 


J 



Figure 4-23 Backup Cache Flush Backup Tag Store Register —(EPR 121io79i6) 



4.1.3.6.3 Backup Cache Flush Primary Tag Store Register (BCFPTS)— EPR 122 

The backup cache flush primary tag store (BCFPTS) register is a write-only register. 
Figure 4-24 shows the format. 

An EPR write (MTPR) of the BCFPTS register clears all the valid bits in the primary tag 
store. The C-chip ignores the contents of the RDAL data bus during the transaction. The 
write to the register causes an immediate flush of all the valid bits in the C-chip's copy of 
the primary cache tag store. 
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An EPR read of the BCFPTS register causes the C-chip to complete the RDAL cycle as 
normal for an EPR read (MFPR)'. For example, reads of the BCFPTS register return 
unpredictable data. 



3 

1 









L 


Writes: Doesn't Matter 


Reads: Unpredictable 





Figure 4-24 Backup Cache Flush Primary Tag Store Register —(EPR l22,o 7Aie) 

4.1.3.7 Use of the C-Chip Registers 

The 10 registers implemented by the C-chip provide full control over the backup cache 
tag store and the primary tag store in the C-chip. Access to these regiisters is with the 
MTPR and MFPK instructions, which require kernel-mode privilege. 

4.1.3.7.1 Control of the Cache 

Normal operational control of the backup cache and primary tag store in the C-chip 
is provided through writes to the backup cache control (BCCTL) register. Bits in this 
register enable the use of backup cache and primary tag store. 

The backup cache and primary tag store may be flushed during normal operation by 
writing a to the BCFBTS and BCFPTS registers, respectively. 

4.1.3.7.2 Error Recovery 

When the C-chip detects an error, the C-chip latches error information. This information 
is available by reading the BCSTS and BCERR registers. Statusjock (BCSTS<0>) may 
be written to tell the C-chip that the error information has been read, and to enable it to 
detect subsequent errors. 

If the error was a tag parity error in one of the tag stores, the error may be corrected by 
creating a new tag entry. The new entry is created with a write to the BCIDX register, 
followed by a write to the BCBTS, BCPITS, or BCP2TS register. 

See Chapter 8 for a detailed discussion of error recovery procedures. 

4.1.3.7.3 Cache initialization 

At power-up, the backup cache tag store and primary tag store must be initialized by 
writing each entry with an invalid tag with good parity. Each entry may be written with 
a write to the BCIDX register, followed by a write to the BCBTS, BCPITS, or BCP2TS 
register. 

As part of cache initialization, cache refresh must be enabled, and the cache RAM speed 
must be specified by writing to the backup cache control (BCCTL) register. The console 
macrocode sets the RAM speed for 1 cycle. 

4.1.3.7.4 Diagnostics 

The tag stores and the backup cache data RAMs may be tested by reading and writing 
cache tags with the BCIDX, BCBTS, BCPITS, and BCP2TS registers. Cache refresh may 
be tested by reading and writing the BCRFR register. Error detection may be tested by 
constructing an error, then reading the state from the BCSTS and BCERR registers. 
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4.2 KA670 Main Memory System 

The KA670 includes a main memory controller implemented as part of a VLSI chip called 
the G-chip. The KA670 main memory controller communicates with the MS670 memory 
boards over the MS670 memory interconnect, which uses the G-chip memory interconnect 
(GMI) for the address, control, and data lines. The contoller supports up to four MS670 
memory boards. 

4.2.1 G-Chip Memory Controller 

As a two-port memory controller, the G-chip interfaces the RDAL bus and the CP bus to 
a memory subsystem over a private interconnect, the GMI. It also serves as an adapter 
between the RDAL bus and the CP bus. 

4.2.1.1 G-Chip Port 

The G-chip port interfaces with the CPU, the C-chip, and the backup cache. The G-chip 
port also supports the defined synchronous protocols for DMA. The following sections 
describe the main features of the port. 

4.2.1.1.1 G-Chip CPU Port Addressing 

The G-chip regards all addresses from the RDAL bus with bit<29> equal to and a 
non-EPR read or write command, as memory addresses. The G-chip responds to all 
I/O addresses from the RDAL bus. Transactions with address bit <29> equal to 1 are 
transferred to the CP bus by the G-chip if the address does not correspond to any of its 
internal registers. 

4.2.1.1.2 G-ChIp EPR decoder 

The G-chip supports EPR reads and writes to the system support chip (SSC) on the CP 
bus. These are the only EPRs the G-chip responds to. For EPR addresses that are not 
in the SSC set, G-chip implements a timeout function. The G-chip decodes SSC EPR 
numbers from the RDAL address bus for the TOY clock register, the I/O reset register, 
the console storage registers, and the console registers; it performs the corresponding 
operations on the CP bus. 

If the EPR address passed to the CP bus is not available, the EPR transaction will 
timeout on the CP bus and the RDAL error signal is asserted to abort the CPU 
transaction. For this exception, no error flags are set and no addresses are saved. The 
G-chip supports EPRs 27 to 35 and 55io on the CP bus. 

4.2.1.2 G-Chip Write Buffers 

The G-chip improves write performance of the RDAL bus with a write buffer or queue. 
The queue consists of a 4-quadword element ring buffer, each with an address tag. Each 
element stores valid data that corresponds to the valid byte masks. 

The address tags are content-addressable memories (CAMs). The content of CAMS is 
used to look up and compare with a memory read address, to determine if the data to be 
read is an element in the queue. If the address hits in the queue, then all the elements 
that matched are flushed to memory before the read of memory. No CPU-to-CPU-memoiy 
write transaction data packing is supported by the queue, because the GMI continuously 
scans the queue for elements to retire. 

Data is loaded sequentially into the queue and is unloaded by the GMI port in the 
same order. To ensure coherent operation of the system, the queue is flushed under the 
following circumstances: 

• A clear write buffer transaction by the CPU (P-chip) 
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A read lock by a device on the CP bus 

An I/O write to an address on the CP bus 

An EPR write to a register on the CP bus 

A memory read address that hits in the queue 

An interrupt vector read from a device on the CP bus 

The queue is cleared when RESETL asserts. For example, all the valid entries are 
invalidated. 

4.2.1 .3 G-Chip Registers 

The G-chip has control and status registers (CSRs) that can be read or written only 
from the port (by the CPU). They are all initialized on power-up reset, unless otherwise 
mentioned. This is the only type of reset that the G-chip responds to. It does not respond 
to I/0_RESET (EPR 55) writes to invoke an internal reset. Table 4-15 lists the register 
names, desciptions, and addresses. 

Table 4-15 G-ChIp Registers 



Register/s Description Address 



MEMCSR32 Error status register 2008 0180 

MEMCSR33 Memory error address register 2008 0184 

MEMCSR34 I/O error address register 2008 0188 

MEMCSR35 DMA memory error register 2008 018C 

MEMCSR36 Mode control and diagnostic 2008 0190 

register 



4.2.1.3.1 G-ChIp Register Addressing 

Because there is one G-chip for each CPU, the addresses for all MEMCSRs are fixed. 
Write operations to read-only registers do not cause a CPU machine check and are 
responded to as a normal operation. However, the operation does not alter the contents 
of any G-chip registers. 

4.2.1.3.2 G-ChIp System Error Status Register (MEMCSR32) 

The G-chip reports error information in the MEMCSR32 register. The error flags are 
cleared by writing a 1 to the respective bits in MEMCSR32. MEMCSIt32 is initialized 
only during power-up reset. Figure 4-25 shows the format. Table 4-16 lists the bit 
descriptions. 
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Memory Error Syndrome 
Lost Correctable Memory Error 
Lost Hard Memory Error 
Correctable Memory Error 
Uncorrectable Memory Error 
Bus Parity Error 
Nonexistent Memory 
Lost I/O Error 
I/O Error 
Nonexistent I/O 



CP-bus Memory Error Syndrome 

CP-bus Lost Correctable Memory Error 
CP-bus Lost Hard Memory Error 
CP-bus Correctable Memory Error 
CP-bus Uncorrectable Memory Error 
CP-bus Parity Error 



Error Summary 



I/O Address: 2008 0180 
Longword Read/Write Access 



Figure 4-25 G-Chip System Error Status Register (MEMCSR32) 



Table 4-16 G-Chip System Error Status Register Bits 



MEMCSRS2 

Data Bit Name 



Description 



<31> 



<30:28> 
<27> 



Error summaiy 



MBZ 

CP bus parity error 



This read-only bit is set when any error is 
detected and logged in this register by the G- 
chip. A is returned when this bit is read, if all 
the other error bits in this register are 0. 

Read as 0. Writes have no effect. 

This read/write bit is set when a CP bus DAL 
parity error is detected on a CP bus DMA 
memory write transaction, if the error address 
can be saved in MEMCSR35. This bit is cleared 
by writing a 1. 

NOTE 

The CQBIC is the only CP bus DMA device 
that does not generate or check parity on 
the CP bus. 
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Table 4-16 (Com.) G-Chip System Error Status Register Bits 



MEMCSR32 
Data Bit 



Name 



Description 



<26> 



CP bus uncorrectable 
memory error 



<25> 



<24> 



CP bus correctable memory 
error 



CP bus lost hard memoiy 
error 



<23> 



CP bus lost correctable 
memory error 



<22:16> 



CP bus memory error 
syndrome 



<15> 



G-chip nonexistent I/O 



This read/write bit is set to 1 by an uncorrectable 
ECC error that occurs during a CP bus DMA 
memory read or masked wriiK transaction , if the 
error address can be saved in MEMCSR35. An 
octaword read is always performed in response to 
a DMA read request, and this bit may set even if 
the data is not returned to the CP bus. This bit 
is cleared by writing a 1. 

This read/write bit is set to 1 when a correctable 
(single-bit) error is detected during a CP bus 
DMA memory read or masked write transaction, 
if the error address can be staved in MEMCSR35 
and if MEMCSR36<11> is set. This bit is cleared 
by writing a 1. 

This read/write bit is set to 1 when an 
uncorrectable ECC error or a CP bus DMA 
parity error occurs on a transaction initiated by 
a CP bus DMA master while either <27,26> was 
set (indicating that MEMCSR35 could not be 
used). This read/write bit is cleared by writing a 
1. When this bit is set, the error and the address 
of the error are lost. 

This read/write bit is set to 1 when a correctable 
ECC error occurs on a transiaction initiated by 
a CP bus DMA master while <25> was set and 
MEMCSR36<11> was set or MEMCSR36<11> 
was cleared (indicating that MEMCSR35 could 
not be used). This read/writ® bit is cleared by 
writing a 1. When this bit is set, the error and 
the address of the error are lost. 

NOTE 

Only one of MEMCSR32 bits 27, 26, and 25 
can be set at any time, since MEMCSR35 can 
save only the first error address. 

This read-only field stores the memory error 
syndrome. The field is loaded when an ECC 
memory error is detected from CP bus initiated 
transactions. The priority for logging the 
syndrome is first error-logged. Subsequent 
memory error syndromes are not logged until 
the associated error bits are cleared. This 
field contains valid data while a correctable 
or uncorrectable CP bus error bit is set. Writes to 
this field have no effect. 

This read/write bit is set if <14> is cleared for 
G-chip originated I/O transactions to the CP 
bus which do not respond (and hence signal 
timeout abort errors after the G-chip internal 
timer overflows). The error address is saved in 
MEMCSR34. This bit is cleared by writing a 1. 
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Table 4-16 (Cont.) G-Chip System Error Status Register Bits 



MEMCSR32 
Data Bit 



Name 



Description 



<14> 



G-chip I/O error 



<13> 



G-chip lost I/O error 



<12> 



<11> 



G-chip nonexistent memory 
address 



G-chip bus parity error 



<10> 



<9> 



<8> 



G-chip uncorrectable 
memory error 



G-chip correctable memory 
error 



G-chip lost hard memory 
error 



This read/write bit is set if <15> is cleared for 
transactions from the G-chip bus to the CP bus 
which are terminated by the CPERR signal 
or by a read parity error, and not by a G-chip 
timeout abort error. The error address is saved in 
MEMCSR34. This bit is cleared by writing a 1. 

This read/write bit is set when transactions from 
the G-chip bus to the CP bus terminate in error, 
while either the G-chip FO or nonexistent I/O 
error bits are set (indicating that MEMCSR34 
could not be used). This bit is cleared by writing 
al. 

NOTE 

Only one of MEMCSR32 bits 15 or 14 can be 
set at any time, since MEMCSR34 can save 
only the first error address. 

This read/write bit is set if the error address 
for G-chip bus transactions to invalid memory 
addresses can be saved in MEMCSR33. This bit 
is cleared by writing a 1. 

This read/write bit is set if the error address for 
a RDAL parity error from a G-chip memory write 
transaction can be saved in MEMCSR33. RDAL 
parity errors are not reported for I/O and external 
processor register (EPR) write transactions. This 
bit is cleared by writing a 1. 

This lead/write bit is set if the error address for 
an uncorrectable ECC error from a memory read 
or masked vmte transaction initiated from the 
G-chip bus can be saved in MEMCSR33. This bit 
is cleared by writing a 1. 

This read/write bit is set if the error address can 
be saved in MEMCSR33 and if MEMCSR36<11> 
is set for a correctable (single-bit) error from 
a memory read or masked write transaction 
initiated from the G-chip bus. This bit is cleared 
by writing a 1. 

This read/write bit is set when either a 
nonexistent, bus parity, or uncorrectable ECC 
error occurs as a result of a G-chip bus-initiated 
transaction while <12, 11, or 10> was set. This 
read/write bit is cleared by writing a 1. If this bit 
is set, the address of the error could not be saved 
in MEMCSR33. 
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Table 4-16 (Com.) G-Chip System Error Status Register Bits 



MEMCSR32 
Data Bit 



Name 



<7> 



G-chip lost correctable 
memory error 



<6:0> 



G-chip error syndrome 



Description 



This read/write bit is set when a correctable ECC 
error occurs from a bus-initiated transaction 
while <9> and MEMCSR36<:11> was set, or while 
MEMCSR36<11> was cleared (indicating that 
MEMCSR33 could not be used). This read/write 
bit is cleared by writing a 1. If this bit is set, 
the address of the error could not be saved in 
MEMCSR33. 

NOTE 

Only one of 1V1EMCSR32 bits 12, 11, 10, and 
9 can be set at any time, since MEMCSR33 
can save only the first error address. 

This read-only field stores the error syndrome 
and is loaded when a G-chip memory error is 
detected. The priority for logging the syndrome 
is first error-logged. Subsequent memory error 
syndromes are not logged until the associated 
error bits are cleared. This field contains valid 
data only when a correctable or uncorrectable 
G-chip bus error bit is set. VWtes to this field 
have no effect. 



4.2.1.3.3 Memory Error Address Register (MEMCSR 33) 

MEMCSR33 contains the octaword error address from bus-initiated memory transactions. 
The address is loaded by the first memory error and is not changed until that error bit 
is cleared in MEMCSR32. This register is read-only and has valid content only while 
a corresponding error bit (<12:9>) is set. Figure 4-26 shows the format of the register. 
Table 4-17 lists the bit descriptions. 



3 2 
1 9 


2 

8 4 


3 


[ MBZ 


Error Address 


MBZ 



I/O Address: 2008 0184 
Longword Read-Only Access 



Figure 4-26 G-chip Memory Error Address Register (MEMCSR33) 
Table 4-17 Memory Error Address Register Bits 



MEMCSR33 
Data Bit 



Name 



Description 



<31:29> 


MBZ 


<28:4> 


Error address 


<3:0> 


MBZ 



Read as 0. Writes have no eflfect. 
Octaword address of the first memoiy error. 
Read as 0. Writes have no efl'ect. 
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4.2.1.3.4 I/O Error Address Register (MEMCSR 34) 

MEMCSR34 contains the longword error address of initiated I/O transactions. The 
address is loaded by the first I/O or nonexistent I/O error and is not changed until 
that error bit is cleared. This register is read-only and has valid content only while a 
corresponding error bit (<15:14>) is set. 

Note, that since the address is in I/O space, address bit <29> is 1, even though 
MEMCSR34's bit <29> does not reflect this. Figure 4-27 shows the format. Table 4-18 
hsts the bit descriptions. 



3 2 
1 9 


2 
8 






2 


1 


MBZ 




Error 


Address 




MBZ| 



I/O Address: 2008 0188 

Longword Read-Only Access 



Figure 4-27 G-Chip I/O Error Address Register (MEMCSR 34) 
Table 4-18 G-Chip i/0 Error Address Register Bits 



MEMCSR34 
Data Bit 



Name 



Description 



<31:29> 


MBZ 


<28:2> 


Error address 


<1:0> 


MBZ 



Read as 0. Writes have no effect. 
Longword address of first initiated I/O error. 
Read as 0. Writes have no effect. 



4.2.1.3.5 CP bus Error Address Register (MEMCSR 35) 

MEMCSR35 contains the octaword error address of DMA-initiated transactions from the 
CP bus. The address is loaded by the first memory error. This address is not changed 
until that error bit is cleared and another error is logged. This register is read-only and 
has valid content only while a corresponding error bit (<27:25>) is set. Figure 4-28 shows 
the format of the register. Table 4-19 lists the bit descriptions. 



2 2 
9 8 



4 3 



MBZ 



Error Address 



MBZ 



I/O Address: 2008 018C 
Longword Read-Only Access 



Figure 4-28 CP bus Error Address Register (MEMCSR 35) 
Table 4-19 CP Bus Error Address Register Bits 



MEMCSR35 
Data Bit 



Name 



Description 



<31:29> 



MBZ 



Read as 0. Writes have no effect. 
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Table 4-19 (Cont.) CP Bus Error Address Register Bits 



1VIEMCSR35 

Data Bit Name 



Description 



<28:4> 



<3:0> 



Error address 



MBZ 



Octaword address of first DMA-initiated memory 
error. 

Read as 0. Writes have no effect. 



4.2.1.3.6 G-Chip Mode Control and Diagnostic Status Register (MEMCSR 36) 

The bits in this register control G-chip operating modes. This register also stores 
diagnostic status information. The MEMCSR36 bits are read/write an<i are cleared 
asynchronously with the assertion of RESETL at power-up. Figure 4-29 shows the 
format of the register. Table 4-20 lists the bit descriptions. 



3 3 2 
1 9 



2 2 

3 2 



1111111 
654321098765432 



1 



Ji ii 



Force Refresh Request 

Disable Refresh 

Force OP-bus Owner 

Force Wrong Parity 

Force Write Buffer Hit 

Flush Write Buffers 

Disable Page mode 

Disable Memory ErrorDetect 

Refresh Requested 

EPR Timeout Prescaler 

Enable Soft Error Logging 

Timer Count Select 

Cache RAM Speed 

FDM Second Pass 

Fast Diagnostic Test mode 

Memory/Diagnostic Check Bits 

Memory Check Bits 

Must Be Zero 

Diagnostic Check Bits Mode 



I/O Address: 2008 0190 
Longword Read/Write Access 



Figure 4-29 G-Chip Mode Control and Diagnostic Status Register (MEMCSR 36) 
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Table 4-20 G-Chip MIode Control and Diagnostic Status Register Bits 



MEMCSR36 
Data Bit 



Name 



Description 



<31> 



Diagnostic check mode 



<30> 
<29:23> 



Must be zero 
Memory check bits 



<22:16> 



Memory/diagnostic check 
bits 



When set to 1 by a write, this read/write bit 
enables the contents of MEMCSR36<22:16> 
to be passed as check bits during a memory 
write transaction, instead of the normal ECC 
check bits. This is true unless an RDAL parity 
error occurred on the write. If an RDAL parity 
error occurred, the low three check bits of 
this field are inverted as they are written to 
memory. When this bit is a 0, the contents of 
MEMCSR36<22:16> are ignored during memory 
write transactions. MEMCSR36<22:16> should 
be written along with this bit. 

Read as 0. Writes have no effect. 

Regardless of the diagnostic check mode bit, the 
contents of MEMCSR36<29:23> are loaded from 
ECC check bits for the unaligned longword 
during a G-chip memory read or a second 
signature read transaction prior to a MEMCSR36 
read. The read check bits for a masked memory 
write transaction are not latched. When loaded, 
this bit field is held until the register is read. 
These bits are read-only and are undefined until 
a second signature read or any memory read 
transaction is complete. 

When diagnostic check mode is enabled, this 
write field substitutes for the check bits 
generated by the ECC generation logic during 
memory masked or unmasked write transactions. 
If a RDAL parity error occurs, the low three 
check bits are inverted as they are written to 
memory. If diagnostic check mode is not enabled, 
the contents of MEMCSR36<22:16> are ignored 
during memory write transactions. 

This read field is loaded with the check bits from 
the ECC check bits for the requested aligned 
longword of the requested quadword, or for the 
first of two signature read transactions following 
a read of MEMCSR36. When loaded the bits are 
held until the register is read. 

NOTE 

The two fields MEMCSR36<29:23> and 
MEMCSR36<22:16> have a load control 
pointer that is initialized to point to 
MEMCSR36<22:16> by a chip reset or 
by a MEMCSR36 read. The pointer is 
incremented by the internal memory 
sequencer for a signature read, or for each 
returned longword of a G-chip memory 
octaword read (not a masked write). 
Therefore, the programmer is responsible 
for alignment of this pointer during memory 
diagnostics. 
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Table 4-20 (Cont.) G-Chip Mode Control and Diagnostic Status Register Bits 

MEMCSR36 

Data Bit Name Description 



<15> 



Fast diagnostic test mode 



<14> 



FDM second pass 



<13> 



Cache RAM speed 



<12> 



Timer count select 



<11> 



Enable soft error logging 



<10:9> 



EPR timeout prescaler 



This read/write bit provides a mechanism for 
speeding up the initial diagnostic testing of 
memory. Writing a 1 to this bit causes the G-chip 
to set the M0DESEL<1> GMI port output signal, 
indicating to the GMX that it is in fast diagnostic 
test mode. 

In systems with more than four bank pairs of 
memory per module, the memory test in fast 
diagnostic mode has to be done in two passes. 
This read/write bit (cleared at power-up) should 
be set, and a second pass of the test should be 
run. This enables testing of modules with more 
than four banks. This bit has no effect unless 
MEMCSR36<15> is set. 

On the KA670, this bit should be set to 0, 
indicating that no extra cycles are needed when 
accessing the backup cache. When cleared, 
this bit indicates that the system is using 
fast, one-cycle cache RAMs. When this bit is 
a 1, it indicates the system is using two-cycle 
RAMs. This bit is cleared on power-up. G-chip's 
interface alters its response behavior by one 
cycle, depending on the state of this bit. 

This read/write bit enables the timers in the chip 
to be used over a G-chip clock cycle range of 20 ns 
to 40 ns. When set, this bit increases the count 
value of all the G-chip interfiace timers. The CP 
bus timers are not affected. When the cycle time 
is 28 ns or less, this bit should be a 1. For a 
cycle time greater than 28 ns, this bit should be 
cleared to 0. 

When this read/write bit is 0, correctable (single- 
bit) errors are corrected by the ECC logic, but the 
SERRIRQL output is not asserted, the associated 
error addresses are not logged in MEMCSR33 
or MEMCSR35, the error syndrome fields of 
MEMCSR32 are not loaded, and <25, 9> are not 
set. <23, 7> is set by correctable errors to signal 
these lost correctable errors. 

When this bit is a 1, correctable errors are 
corrected by the ECC logic and reported on the 
SERRIRQL output. Correctsible as well as other 
error addresses and syndromes are logged in 
MEMCSR33 or MEMCSR35. Also, <25, 9> are 
set when errors are detectedi. This makes it 
easier to reserve the error-logging information for 
uncorrectable, NXM, or parity errors when soft 
error reporting is disabled. 

On the KA670, this field should be set to II2. 
This field scales the EPR timeout counter up to to 
make it easier to access slow-access C-chip EPR 
registers. Field values: 11 = 1.5 ^is, 10 = 12 jis, 
01 =32 ps, 00 = 910 ps. 
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Table 4-20 (Cont.) G-Chip Mode Control and Diagnostic Status Register Bits 



MEMCSR36 

Data Bit Name 



<8> 



<7> 



<6> 



Refresh requested 



Disable memory error 
detection 



Disable page-mode 



<5> 



Plush write buffers 



<4> 



Force write buffer hit 



<3> 



Force wrong parity 



Description 



This read-only flag is set when a refresh 
transaction is selected as the current operation. 
This implies that the refresh interval counter has 
counted to the overflow condition. This flag is 
cleared by reading MEMCSR36. 

When this bit is a 1, memory error detection 
and correction are disabled. All memory-related 
error logging in MEMCSR32, MEMCSR33, and 
MEMCSR35 is disabled. No memory-related 
error reporting occurs by asserting the ERRL, 
CPERRL, HERRIRQL or SERRIRQL output pins. 

When set, this bit disables page-mode memory 
transactions. It causes the G-chip to deassert 
RASTIME after every memory transaction. This 
function is for test purposes only. If this bit is 
set during normal system operation, memory 
performance is degraded. 

When written to a 1, this read/write bit initiates 
a i!ush of the QUEUE, the CPQUE, and hence 
the invalidate QUE. The G-chip delays the 
assertion of the G-chip ready signal for this 
MEMCSR36 write until the flush completes. 
When this bit is set, subsequent vmtes to 
MEMCSR36 result in the stall of the ready 
signal until all queues are flushed. A write of 
clears this bit and disables the stall conditions. 

When set, this read/write bit forces a memory 
read address from a corresponding G-chip bus 
or CP bus port to hit any valid element in the 
write queues, regardless of the address tag. 
This ensures that all write queue elements and 
associated invalidate hit addresses are retired to 
memoi7 prior to the completion of the pending 
read. This bit should be set only for diagnostic 
purposes. If this bit is set during normal system 
transactions, there is a performance degradation 
on memory reads that follow memory writes. 

When set to 1, this read/write bit forces the 
result of the CP bus and the G-chip bus parity 
checkers to be inverted. This results in a parity 
check failure. This action is used to emulate an 
RDAL or a CP DAL parity error during memory 
read or write transactions and G-chip to CP bus 
transactions. DAL parity is ignored for G-chip 
bus I/O transactions. This bit is for test purposes 
only and should not be set during normal system 
operation. 
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Table 4-20 (Com.) G-Chip Mode Control and Diagnostic Status Reghster Bits 



MEMCSR36 
Data Bit 



Name 



<2> 



Force CP bus owner 



<1> 



Disable refresh 



<0> 



Force refresh request 



Description 



When set to 1, this read/write bit forces the G- 
chip to request CP bus mastership by asserting 
CPDMRL. The write that sets this bit is stalled 
on the G-chip bus until CPDMGIL is received. 
G-chip gives up the mastership of the CP bus 
when this bit is cleared. This bit is set to 1 when 
RESET L asserts, so the G-chip attempts to be 
the owner of the CP bus following a power-up 
reset. 

When set, this read/write bit; disables 
memory refresh (regardless of the state of 
MEMCSR36<0>) and clears the refresh address 
counter and interval counter to 0. This function 
is for test purposes only. The bit should not be 
set during normal transactions or while the force 
refresh request bit is set. 

When cleared, this read/write bit allows the 
refresh control logic to operate normally. This 
bit is set at power-up only if the TESTMODE 
pin is asserted as RESET negates. When 
set on power-up or by writing a 1 with the 
TESTMODE pin asserted, this bit forces 
the G-chip to do continuous memory refresh 
transactions, incrementing the refresh address on 
each transaction. A pending memory operation 
takes precedence over the continuous refresh 
transactions. 

If the TESTMODE pin is negated, the G-chip 
ignores the state of this bit and behaves as if 
this bit were cleared. The bit can be cleared by 
writing a and by deasserting the TESTMODE 
pin at power-up. This behavior facilitates a 
power-up functional test for probing. 

RESTRICTION 

This bit should be used foir test purposes 
only. If TESTMODE is selected and this bit 
is set during normal system operation, 
memory operations result in severe 
performance degradation. Also, memory 
array power consumption increases. This 
bit should never be set while the disable 
refresh bit is set. 



4.2.1.4 Bus Timeout and Nonexistent Addresses 

The G-chip prevents the bus from hanging if a nonexistent device is addressed in the 
following ways, depending on the type of transaction: 

• On CPU-to-memory read transactions to nonexistent or invalid locations, the G-chip 
responds with ERRL, sets the nonexistent memory bit <12>, and logs the address in 
the memory error address register (MEMCSR33). 

• On CPU memory write transactions to nonexistent or invalid locations, the G-chip 
asserts HERRIRQL, sets the nonexistent memory bit <12>, and logs the address in 
the memory error address register (MEMCSR33). 
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• EPR transactions, read interrupt vector transactions, and I/O read/write transactions 
that are recognized as for G-chip bus to CP bus adapter reaction are transferred to 
CP bus transactions. If no device responds to these CP bus master transactions, the 
CP bus master times out, aborts, and informs the slave of the exception. 

For the read transaction exceptions (EPR, I/O, or interrupt), the G-chip responds 
with ERRL. For I/O (not EPR) write transaction exceptions, the G-chip asserts 
HERRIRQL. The I/O error bit <14> is set on I/O reads and I/O writes that time out; 
the address is loaded in the I/O error address register (MEMCSR34). The G-chip does 
not log any information for EPR or interrupt vector transaction exceptions. 

• In all the above cases, the G-chip terminates the transaction by asserting RDYL or 
ERRL, thus preventing the system from hanging. 

The G-chip does not recognize EPR transactions as for transfer to the CP bus. EPR 
transactions are timed by the G-chip, according to the time limit established by 
MEMCSR36<10:9>. The timeout mechanism is the nonexistent EPR timeout counter, 
which serves to terminate EPR transactions that have not been responded to by a 
bus device. The G-chip aborts the transaction by asserting ERRL, but does not log 
any information. This timeout counter starts counting with the assertion of ASL. The 
counter is is cleared with the assertion of RDYL, ERRL, or RTYL. 

4.2.1.5 Peripheral Port (CP Port) 

The CP port of the G-chip interfaces with the G-chip port and the GMI port. Sections 

4.2.1.5.1 through 4.2.1.5.4 describe the main features of the CP port. 

4.2.1.5.1 Addressing 

The G-chip, as bus slave, does not respond to I/O transactions initiated from peripheral 
bus (CP bus) DMA devices. Any transaction whose I/O or memory address does not 
match the programmed and validated values in the G-chip shadow registers is regarded 
as a no-operation request. The SSC timeout counter is assumed to cause this transaction 
to abort, so the G-chip does not respond. 

4.2.1 .5.2 Multiple-Transfer Transactions and Address Alignment 

The CP port supports longword (2-word), quadword (4-word), hexword (6-word), and 
octaword (8-word) memory transactions; and only longword I/O transactions. It maintains 
quadword alignment on quadword transactions, and octaword alignment on hexaword 
and octaword transactions. Quadword alignment is preserved by complementing bit<2> 
of the address for accessing the second longword. Octaword alignment is preserved by 
incrementing (modulo-4) bits <3:2> of the address for accessing subsequent longwords. 

4.2.1.5.3 Write Buffers 

The G-chip improves write performance of the CP bus with the help of a write buffer, 
called the CPQUE. The CPQUE consists of two octaword buffer elements. Each element 
has an address tag and can store up to an octaword of data with the corresponding byte 
masks. The address tags are CAMs; a tag compare (lookup) occurs on CP bus to memory 
reads, to check if the data to be read is a CPQUE element. If the address compares (hits) 
in the CPQUE, then both elements are flushed to memory before the memory read is 
performed. Write data is loaded sequentially into the CPQUE and unloaded by the GMI 
port in the same order. 

To ensure correct operation of the system, the CPQUE is flushed under the following 
circumstances: 

• Read lock on the G-chip bus 

• CPU I/O or EPR read to an address on the CP bus 
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• CPU read interrupt vector transaction 

• CP bus memory read address that hits in the CPQUE 

The CPQUE is cleared when RESET L asserts during power-up. For example, all the 
valid elements are invalidated. 

4.2.1 .5.4 CP Bus Timeout 

The G-chip provides a timeout mechanism on the CP bus, to prevent G-chip initiated CP 
bus transactions to nonexistent I/O or EPR addresses, and to prevent interrupt vectors 
from hanging the bus. This is done with a CP bus cycle counter that has a fixed cycle 
count whose absolute time scales with the CP bus clock. The timeout is triggered by the 
assertion of the CP bus data strobe (CPDSL); it is cleared by the assertion of the CP bus 
ready or error signals (CPRDYL or CPERRL), or by the negated state of the no response 
abort (CPNRA) signal after the counter overflows. 

The CPNRA signal is a NOR function of the "not me" signals of the DMA devices on the 
CP bus. If this signal is deasserted, it indicates that one of the DMA devices is going to 
respond to the current transaction. 

If there is no response on the CP bus and the counter overflows, the G-chip looks at the 
state of CPNRA and reacts as follows: 

• If CPNRA is asserted, terminate the transaction by deasserting CPDSL and CPASL. 
If the aborted transaction was a read (I/O read, EPR read, or an interrupt vector 
read), return ERRL to the CPU. If the aborted transaction was a write (I/O write), 
assert HERRIRQL. On I/O read and write transactions that are aborted by timer 
overflow, the G-chip sets the nonexistent I/O bit <15> and logs the address in 
MEMCSR34. On EPR reads/writes and interrupt vector reads, the G-chip does 
not log any information. 

• If CPNRA is deasserted, the G-chip waits for CPRDYL or CPERRL from the CP bus. 
In the extreme case that a device deasserts its "not me" signal and fails to respond, 
the SSC's CP bus timeout counter should overflow and abort the transaction, thus 
preventing the system from hanging. This counter can be set to a very high value, 
about 15 ms. 

4.2.1.6 GMi Port 

The GMI port of G-chip supports up to 32 banks of memory. The porlD provides 7-bit error 
checking and correction (ECC) for a 32-bit memory data bus. 

4.2.1 .6.1 Memory Addressing 

The G-chip can control up to 32 banks (16-bank pairs) of DRAM, with each bank 
consisting of 32 data bits and 7 bits of ECC code. These banks are addressed as follows : 

• Each bank pair has a base address register value resident in the G-chip and CP 
(shadow register) ports, with either 4 or 6 significant bits (depending on the bank's 
RAM size). 

• Bit <29> of the address is a (memory address space). 

• When a validated base address register value matches the address from the address 
bus or the CP bus, the bank pair at that address is selected for either reading or 
writing. Two banks are enabled for every base address match. Bit <2> of the address 
further selects one of the two enabled bank pairs. 

- If the RAM size is 1 megabyte, the base address maps to bitis <28:23> of the 
address, the row address maps to bits <22:13> of the address and the column 
address maps to bits <12:3> of the bus address. 
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- If the RAM size is 4 megabytes, the base address maps to bits <28:25>, the row 
address to bits <24,22:13>, and the column address to bits <23,12:3> of the bus 
address. 

4.2.1.6.2 Support for Pagemode 

The GMI port of G-chip supports extended pagemode to improve the GMI bandwidth. 
Addresses within the same physical memory page— for example, addresses whose bits 
<28:13> are the same— can be accessed at a faster rate than addresses that are not in the 
same page. This is done by keeping the row address the same and changing the column 
address only. 

The GMI port provides a timeout counter for pagemode, since DRAMs have a restriction 
on the time that transactions can be done in page mode. In order to keep the pagemode 
timeout interval from varying with the G-chip clock cycle times, the count value can be 
changed by setting the timer count select bit MEMCSR36<12>. This bit should be set 
at cycle times greater than 28 ns and cleared at cycle times less than or equal to 28 
ns. Except for refresh, all transactions are done in page mode as long as the previous 
and current bank and row address match, and the page mode timeout counter has not 
overflowed. The page mode timeout counter overflows after 8 ps. 

4.2.1.6.3 Memory Error Detection and Correction 

On memory write transactions, the source of the memory data comes from the the 
corresponding write buffer, together with 7 check bits generated from an ECC generator. 
On memory read transactions, ECC is generated from the memory data inputs and 
compared to the check bits. The ECC logic uses a 32-bit modified Hamming code to 
encode the 32-bit data longword into seven check bits. 

When an error is detected, the syndrome is loaded into <22:16> or <6:0>, depending on 
whether the transaction was requested by the G-chip port or the CP port. The G-chip 
ECC logic detects and corrects single-bit errors in the memory data. Single-bit errors in 
the check bit field are detected and reported. Double-bit errors are detected and reported, 
but not corrected. 

Modified Hamming Code 

Figure 4-30 shows the modified Hamming code. The data bits marked with an X in each 
row are Exclusive-ORed together to generate the corresponding check bit. In a memory 
read transaction, a non-zero syndrome indicates an error. If the syndrome generated 
matches a column of X bits, the error is correctable and the column number corresponds 
to the corrected bit. If a syndrome value does not match any value in Figure 4-30, it 
indicates an uncorrectable error. Table 4-21 shows the syndromes from Figure 4-30 that 
can be read from <22:16> or <6:0>. 
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G-Chip Data Bus <31 :0> 



Byte 3 
3 2 

1 4 



XXXX 



XXXX 



XXXX 



XXXXXXXX 



XXXXXXXX 



XXXXXXXX 



XXX 



Byte 2 

2 1 

3 6 



XXXX 



XXXX 



XXXX 



XXXXXXXX 



XXXXXXXX 



XXX X 



Byte 1 



XXXX 



XXXX 



XXXX 



XXXXXXXX 



XXXXXXXX 



XXX 



ByteO 

7 



XXXX 



XXXX 



XXXX 



XXXXXXXX 



XXXXXXXX 



XX X 



G-Chip Data Bus <32:38> 



Generated Check Bits 

CI 02 C4 08 016 032 OT 

3 3 3 3 3 3 3 

2 3 4 5 6 7 8 



Even Parity - 01, 02, CT 
Odd Parity - 04, 08, 016, 032 

Error_Syndrome<N> = (Generated OB<N> XOR Memory OB<N>) 

Figure 4-30 32-Bit Modified Hamming Code 
Table 4-21 Syndrome Examples 



MEMCSR32<2«:16> 
MEMCSR32<6:0> 


Bit Position in Error 


0000000 


No error detected. 




Data Bits (0 to Sl.o) 


1011000 





0011100 


1 


0011010 


2 


loinio 


3 


0011111 


4 


1011011 


5 


1011101 


6 


0011001 


7 


1101000 


8 


0101100 


9 


0101010 


10 


1101110 


11 


0101111 


12 
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Table 4-21 (Com.) Syndrome Examples 



MEMCSR32<22:16> 
MEMCSR32<6:0> 


Bit Position in Error 


1101011 


13 


1101101 


14 


0101001 


15 


1110000 


16 


0110100 


17 


0110010 


18 


mono 


19 


0110111 


20 


1110011 


21 


1110101 


22 


0110001 


23 


0111000 


24 


1111100 


25 


1111010 


26 


0111110 


27 


1111111 


28 


onion 


29 


0111101 


30 


1111001 


31 




Check Bits (32 to 38io) 


0000001 


32 


0000010 


33 


0000100 


34 


0001000 


35 


0100000 


37 


0000111 


Result of incorrect check bits written on detection of a RDAL or 
CP bus parity error. 


All others 


Multibit errors 



Forcing Incorrect Check Bits 

When a data parity error is detected from the RDAL during a memory write transaction, 
incorrect check bits are generated and loaded into memory to force an \mcorrectable error 
for detection on a subsequent memory read. The algorithm for generating incorrect check 
bits is to complement the generated check bits<2:0> output and pass the generated check 
bits<6:3> unchanged. This would generate an error syndrome of 0000111. 
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4.2.1.6.4 Memory Refresh 

The G-chip GMI controls DRAMs that must be refreshed at a fixed interval. The G-chip 
has an internal refresh interval timer. The timer initiates a refresh transaction every 
480 cycles if the timer count select bit in MEMCSR36 is cleared (at cycle times less than 
or equal to 28 ns), and every 336 cycles if the timer count select bit in MEMCSR36 is set 
(at cycle times greater than 28 ns), 

4.2.1.6.5 GMI priority 

The GMI port has to arbitrate between the CP port and the G-chip port for memory 
accesses. The GMI port has a priority-based arbitration scheme to help sustain CPU and 
I/O performance and latency The GMI port gives a higher priority to the CP port than 
the G-chip port. However, when a G-chip read or write request is pending, the GMI port 
services a maximum of three consecutive CP write requests before servicing one pending 
G-chip request. After the pending G-chip request is serviced, the "three CP transactions" 
counter is reset until the condition of CP write service and pending G-chip request occurs. 
Then the "three CP transactions" counter begins. 

From the CP port's perspective, five consecutive writes may occur before the G-chip 
service interruption is observed. This is a result of the two write buffers and one GMI 
operation buffer. If a G-chip port request is not pending, there is no restriction on the 
number of consecutive CP writes serviced by the GMI. CP reads are always given the 
highest priority, unless the read address matches the address of a bufl'ered CP write. In 
that case, the write is completed before the read is serviced. Table 4-22 indicates the 
GMI priority based on the three consecutive CP writes serviced counter while a G-chip 
port request is pending. 

Table 4-22 GMI Port PrIorHy 



GMI Priority 


GMI Transactions 


GMI Transactions 




Number of CP Writes < 3 


Number of CP Writes = 3 


1 


Refresh 


Refresh 


2 


Signature Read 


Signature Read 


3 


CP Port Read 


CP Port Read 


4 


CP Port Write 


G-chip Port JJead 


5 


G-chip Port Read 


G-chip Port Write 


6 


G-chip Port Write 


CP Port Write 



4.2.1 .7 Transactions and Port Interactions 

This section describes how the three ports of the G-chip interact with each other. 

4.2.1.7.1 Support for Cache invalidates 

Because DMA is done on the CP bus, invisible to the G-chip bus, the G-chip provides 
a mechanism to invalidate cache entries that have been written to by DMA devices. 
Cache entries are invalidated by doing an octaword DMA write protocol on the G-chip 
bus. The G-chip supports octaword cache invalidates only; it does not support quadword 
invalidates. The G-chip, with some external CP bus address latches (I-latch), provides a 
mechanism to reduce the number of invalidates that have to be done on the G-chip bus 
by doing an address lookup on a separate invalidate lookup bus. 
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Invalidate Lookup 

In order to support the invalidate lookup protocol, the G-chip requires the module to 
have external latches of the CP bus address that drive the C-chip invalidate lookup bus. 
The CP bus address is latched by the Match whenever a transaction is initiated on the 
CP bus. If the transaction is a write and the address is valid (and the CPQUE is not 
full, then the address is loaded into the CPQUE. At the same time, the G-chip asserts a 
lookup request signal to the C-chip, indicating that the lookup address is valid. The CP 
bus write transaction does not complete until the result of the lookup is received from the 
C-chip. If the address hits in one or both of the cache tag stores, an invalidate hit bit is 
set in the corresponding CPQUE element; this indicates the address has to be invalidated 
on the G-chip bus when the data is retired to memory. 

There is an additional constraint if cache lookups are initiated when a memory read 
transaction is in progress on the G-chip bus — the result of the lookup may be misleading 
if the lookup address is in the same octaword block as the current G-chip read. The 
G-chip does not stall CP bus writes to avoid this problem. Invalidate lookups take place 
as usual. However, if a CP bus write occurs simultaneously with a G-chip port memory 
read, the invalidate hit tags in the CPQUE are set forcibly until the read and its cache 
fill complete. This action ensures that even if the data returned on the RDAL is not 
up-to-date and the result of the lookup for that address was a miss, but the G-chip fill 
just caused it be validated in the cache, an address vill be invalidated as the write data 
is written to memory. 

Invalidate Hits 

Addresses that hit in either the primary cache tag store or the backup cache tag store 
have to be invalidated on the G-chip bus. The G-chip has two invalidate hit address 
buffers that are loaded by the GMI port when the current address marked as having hit 
is t£iken from the CPQUE. As soon as one of these buffers is loaded, the G-chip requests 
the G-chip bus by asserting DMRL. The write transaction on the GMI does not complete 
until the address is loaded in an invalidate hit buffer. The following transactions are not 
allowed to complete until both invalidate hit buffers are flushed : 

• Memory read 

• Memory read lock 

• CP bus EPR or I/O read 

• Read interrupt vector 

The G-chip may retry the following Gr-chip bus transactions to perform invalidates that 
prevent deadlocks : 

• I/O write to G-chip MEMCSR 

• Memory write, SSC EPR write, or an I/O write to the CP bus, that are stalled for any 
reason 

4.2.1 .7.2 I/O Transactions 

On an I/O read or write transaction initiated by the CPU, the G-chip decodes the address. 
If the address does not match any of its internal MEMCSRs, the G-chip does that read 
or write on the CP bus. The G-chip generates a longword address from the quadword 
address and byte masks provided on the G-chip bus. All I/O transactions are either byte, 
word, or longword. On an EPR read or write transaction, the G-chip decodes the EPR 
number; if the number corresponds to an SSC EPR number, the G-chip does the read or 
write on the CP bus. 
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The G-chip port to CP port interface is made up of an address, data, and operation buffer. 
The G-chip port loads information about the transaction into this buffer. The CP port 
master continually monitors and unloads the buffer when the buffer has an operation in 
it. If the buffer is full when the G-chip port needs to load an operation, that transaction 
stalls on the G-chip bus. This buffer is used for all transactions initiated by the CPU and 
performed on the CP bus: 

• I/O read 

• I/O read lock 

• I/O write 

• I/O write unlock 

• EPR read 

• EPR write 

• Interrupt vector read 

• Memory read lock 

• Memory write unlock 

On read transactions (except the memory read lock) where the G-chip port waits for a 
response from the CP bus, the G-chip slave controller monitors the state of the data 
buffer for valid data. 

4.2.1.7.3 Loading and Unloading Write Queues 

The organization of the CPQUE and the QUEUE are different, but their operation is the 
same. Elements of a queue are loaded and a valid bit is set by the corresponding port 
controller. Note that transaction-io-transaction data packing is not done by the write 
queues, since the GMI continuously unloads any valid elements following the previously 
described operation priority. 

If at least one of the buffers in a queue is valid, a write request is made to the GMI port 
by the corresponding port. The GMI then services the writes according to its priority 
scheme. 

Note that each element in the queue implements a valid bit. If a valid bit is set, the GMI 
port regards the element as full and does the memory write. The GMI port does not keep 
data waiting in the buffers in order to fill the buffer or pack longwords. Writes are done 
whenever the GMI can service them. When all valid bits for the elements of a queue are 
set, a full signal is sent to the port controller. Also, when all valid bits for the elements 
of a queue are clear, an empty signal is sent to the port controller. 

The G-chip supports interlocked read transactions from the CPU to memory and the 
CP bus, and from the CP bus to memory. Any device (CPU or CP bus DMA) that does 
a locked transaction, has to be master of the CP bus and the Q22-bus (in a Q22-bus 
system). The address and cycle status code for the lock is broadcasted on the CP bus, 
allowing the CQBIC (if present) to retry the transaction if it is not master of the Q22-bus. 
The read from memory takes place only after there are no more retries from the CQBIC. 

The read lock is regarded as successful if there are no uncorrectable errors in the 
requested read data. Under normal circumstances, when there are no DAL parity 
errors on the returned data, the G-chip expects that the next transaction on the bus 
(that initiated the read lock) is a write unlock. The lock is regarded as completed when 
another transaction is initiated on that bus. If the transaction is not a write unlock, it is 
assumed that write unlock is lost and will not happen. 
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If the read lock is initiated on the G-chip bus, a lost write unlock causes the G-chip to do 
a dummy write unlock on the CP bus. This unlocks the Q22-bus and clears the lock. 

If the read lock is initiated on the CP bus, then any transaction on the CP bus - even a 
G-chip master transaction — can clear the lock. 

4.2.1.7.4 Interrupts 

The G-chip interrupts the CPU with one hard error interrupt and one soft error interrupt. 
The G-chip does not have any vectored interrupts; however, it does support reading 
interrupt vectors from the CP bus. All interrupt vector read transactions from the CPU 
are transferred through the G-chip to CP bus interface. The vector that is read from the 
interrupting device is provided to the CPU on the RDAL, without any modifications. The 
G-chip does ensure that the CPQUE and the invalidate hit buffer addresses are flushed 
before the vector is returned on the RDAL. 



4.2.1.7.5 Transaction Summary 

Table 4-23 indicates whether the write buffers or invalidate hit buffers are flushed on 
various G-chip bus and CP bus transactions, before the transactions complete. 

Table 4-23 System Requirements for Buffered Writes and Invalidates 



Transactions 



Buffered Writes 

StaU G- 

Until Chip 

Retired Port 



G-chip memory read Yes 
(no lock) 



G-chip memory read 
(lock) 



G-chip I/O read (no 
lock and lock) 



G-chip memory write No 
G-chip I/O write 



G-chip DVK 



G-chip EPR 
read/write 



CP 
Port 



Invali- 
dates 



Remarks 



No No Yes All the CP writes that have 

been retired to memory 
have to be invalidated 
before the read completes. 

No Yes Yes It is important to retire CP 

writes here, so the CPU 
gets the most current data 
from I/O devices. 

No Yes Yes It is important to retire CP 

writes here, so the CPU 
gets the most current data 
from I/O devices. 



No 


No 


No 




Yes 


No 


No 


The I/O device should 
get the data written by 
the CPU. Here the CPU 
communicates with the I/O 
device through CSRs. 


No 


Yes 


Yes 


On interrupts, the CPU 
issues a clear write buffer 
command, and G-chip 
writes can be flushed at 
that command. The CP 
writes and their invalidates 
have to be flushed. 


Yes 

(write) 


Yes 
(read) 


Yes 
(read) 
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Table 4-23 (Com.) System Requirements for Buffered Writes and Invalidates 





Buffered Writes 


CP 
Port 


Invali- 
dates 




Transactions 


StaU 
Until 
Retired 


G- 

Chip 

Port 


Remarks 


G-chip clear write 
buffer 


- 


Yes 


No 


No 


No CPU transaction should 
be allowed to happen until 
the G-chip write buffers are 
flushed. 


CP read lock 


Yes 


Yes 


No 


No 


The I/O device should get 
up-to-date data. 


CP memory read (no 
lock) 


Yes 


No 


No 


No 


Stall until hit element is 
retired 


CP memory write 


No 


No 


No 


No 





4.2.1.8 Exceptions 

The G-chip responds to exceptions and errors by terminating transactions with an error 
signal on either bus and/or by interrupting the CPU. 



Exception 



G-Chip Response 



G-chip memory write 
transactions with RDAL 
parity errors 



An uncorrectable memory 
error on the read portion 
of a masked write from the 
QUEUE 

G-chip memory reads with 
uncorrectable memory 
errors in the first quadword 
of data 



G-chip memory transactions 
with invalid memory 
addresses 

G-chip I/O read transactions 
that terminate in an error 
on the CP bus 

G-chip I/O write 
transactions that terminate 
in an error on the CP bus 

G-chip I/O read/write 
transactions that time 
out on the CP bus 



The G-chip interrupts the CPU by asserting HERRIRQL. The 
G-chip does the write to memory, but forces an uncorrectable 
memory error in that location by complementing the three 
least significant check bits. The G-chip bus parity error bit is 
set in MEMCSR32<11>, and the octaword adclress is logged in 
MEMCSR33. 

The G-chip asserts HERRIRQL. The G-chip uncorrectable memory 
error bit is logged in MEMCSR32<10>, and the octaword address 
of that location is loaded in MEMCSR33. In this case, the write is 
not completed. 

The G-chip terminates the transaction with eiTor. On G-chip 
quadword memory reads with uncorrectable memory errors in the 
second (unrequested) quadword, the G-chip does not do a cache fill. 
In all cases, the G-chip l(^s the G-chip uncorrectable memory error 
bit in MEMCSR32<10>, and the octaword address in MEMCSR33. 

The G-chip asserts ERRL (on memory reads) or HERRIRQL 
(on memory writes), sets the G-chip nonexistent memory bit in 
MEMCSR32<12>, and logs the octaword address in MEMCSR33. 

The G-chip asserts ERRL, logs the G-chip I/O error bit in 
MEMCSR32<14>, and logs the longword I/O address in 
MEMCSR34. 

The G-chip asserts HERRIRQL, logs the G-chip I/O error bit in 
MEMCSR32<14>, and logs the longword address of the error in 
MEMCSR34. 

The G-chip asserts ERRL (on reads) or HERRIRQL (on writes), 
and logs the nonexistent I/O bit in MEMCSR32<15>. 
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Exception 



G-Chip Response 



G-chip interrupt vector 
reads or EPR reads that 
time out on the CP bus 

G-chip EPR writes that 
timeout on the CP bus 

CP bus initiated memory 
read transactions with 
uncorrectable memory 
errors 



CP bus memory write 
transactions with DAL 
parity errors 



An uncorrectable memory 
error occurs on the read 
portion of a masked write 
from the CPQUE 



The G-chip asserts ERRL, but does not log any error bits in 
MEMCSR32 or addresses in in MEMCSR34. 



The G-chip does not notify the CPU by asserting HERRIRQL, and 
no errors are logged. 

The G-chip responds by terminating the transaction with 
CPERRL. Multiple-transfer read transactions (CP bus quad, 
hexa, or octa) are aborted on uncorrectable errors in the earlier 

transfers. 

For example, if a CP bus octaword read has an uncorrectable 
error in the second transfer, the third and fourth transfers are 
aborted by the G-chip and the G-chip expects the master device 
to terminate the transaction. If there is an uncorrectable memory 
error in an unrequested longword, the G-chip does not interrupt 
the CPU. 

In all the cases, the G-chip sets the CP bus memory correctable 
error bit in MEMCSR32<25> or the CP bus uncorrectable error bit 
in MEMCSR32<26>, and logs the octaword address of the error in 
MEMCSR35. 

The G-chip interrupts the CPU by asserting a HERRIRQL. The G- 
chip does the write to memory, but forces an uncorrectable memory 
error in that location by complementing the three least significant 
check bits. The CP bus parity error bit is set in MEMCSR32<27>, 
and the octaword address is logged in MEMCSR35. 

The G-chip asserts HERRIRQL. The CP bus uncorrectable memory 
error bit is logged in MEMCSR32<26>, and the octaword address 
of that location is loaded in MEMCSR35. In this case, G-chip does 
not do the write. 



If there is a correctable error on any memory read or masked memory write transaction, 
the G-chip: 

1. Asserts SERRIRQL. 

2. Logs the CRD error bit corresponding to the port (G-chip or CP) that requested the 
transaction. 

3. Logs the address in the corresponding memory error address register, MEMCSR33 (if 
the error occurs on a G-chip transaction) or MEMCSR35 (if the error occurs on a CP 
bus transaction). 



4. Writes the correct data back to main memory. 
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This chapter describes the console serial line and the time-of-year (TOY) clock. The 
chapter also provides an overview of the KA670 bus system. 

5.1 KA670 Console Serial Line 

The console serial line provides the KA670 processor with a full-duplex, RS-423 EIA, 
serial line interface that is also RS-232C compatible. The only data format supported is 
8-bit data with no parity and one stop bit. The four internal processor registers (IPRs) 
that control the operation of the console serial line are a superset of the VAX console 
serial line registers described in the VAX Architecture Reference Manual . 

5.1.1 Console Registers 

There are four registers associated with the console serial line unit. They are 
implemented in the SSC chip and are accessed as IPRs 32 to 35. Table 5-1. lists the 
registers. 

Table 5-1 Console Registers 



IPR Number 


Register Name 


Mnemonic 


Decimal 


Hex 




32 


20 


Console receiver control/status 


RXCS 


33 


21 


Console receiver data buffer 


RXDB 


34 


22 


Console transmit control/status 


TXCS 


35 


23 


Console transmit data buflFer 


TXDB 



5.1.1.1 Console Receiver Control/Status Register - (IPR 32) 

The console receiver control/status register (RXCS), internal processor register 32, is used 
to control and report the status of incoming data on the console serial line. Figure 5-1 
shows the format of the register. Table 5-2 lists the bit descriptions. 
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Figure 5-1 Console Receiver Controi/Status Register— (IPR 32,o 20^^) 
Table 5-2 Console Receiver Control/Status Register Bits 



Data Bit 



Name 



<31:8> 
<7> 



MBZ 
RXdone 



<6> 



RXIE 



<5:0> 



Unused 



Description 



These bits read as Os. Writes have no effect. 

Receiver done (read-only). Writes have no 
effect. This bit is set when an entire character 
has been received and is ready to be read from 
the RXDB register. This bit is automatically 
cleared when the RXDB register is read. The 
bit is also cleared on power-up or the negation 
ofDCOK. 

Receiver interrupt Enable (read/write). When 
set, this bit causes an interrupt to be requested 
at IPL14 with an SCB offset of F8 if RX done is 
set. When cleared, interrupts from the console 
receiver are disabled. This bit is cleared on 
power-up or the negation of DCOK. 

These bits read as Os. Writes have no effect. 



5.1.1^ Console Receiver Data Buffer— (IPR 33) 

The console receiver data buffer (RXDB), internal processor register 33, is used to buffer 
incoming data on the serial line and capture error information. Figure 5-2 shows the 
format of the register. Table 5-3 lists the bit descriptions. 
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Figure &-2 Console Receiver Data Buffer - (IPR 33, o 21,6) 
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Table 5-3 Console Receiver Data Buffer Bits 



Data Bit 



Name 



<31:16> 



<15> 



<14> 



MBZ 



ERR 



OVRERR 



<13> 



FRMERR 



<12> 
<11> 



MBZ 
RCVBRK 



<10:8> 
<7:0> 



MBZ 



Description 



These bits always read as 0. 
effect. 



Writes have no 



Error (read-only). Writes have no effect. This 
bit is set if RBUF <14> or <13> is set. The 
bit is clear if these two bits are clear. This bit 
cannot generate a program interrupt. The bit is 
cleared on power-up or the negation of DCOK. 

Overrun error (read-only). Writes have no 
effect. This bit is set if a previously received 
character was not read before being overwritten 
by the present character. The bit is cleared by 
reading the RXDB, on power-up or the negation 
of DCOK. 

FVaming error (read-only). Writes have no 
effect. This bit is set if the present character 
did not have a valid stop bit. The bit is cleared 
by reading the RXDB, on power-up or the 
negation of DCOK. Error conditions are 
updated when the character is received, 
and it remains present mntil the character 
is read. At that point, the error bits are 
cleared. 

This bit always reads as 0. Writes have no 
effect. 

Received break (read-only). Writes have no 
effect. This bit is set at the end of a received 
character for which the serial data input 
remained in the space condition for 20 bit 
times. The bit is cleared by reading the RXDB 
register, power-up, or the negation of DCOK. 

These bits always read a as 0. Writes have no 
effect. 

Received data bits (read-only). Writes have 
no effect. These bits contaiin the last received 
character. 
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5.1.1.3 Console Transmitter Control/Status Register— (IPR 34) 

The console transmitter control/status register (TXCS), internal processor register 34, 
is used to control and report the status of outgoing data on the console serial line. 
Figure 5-3 shows the format of the register. Table 5-4 lists the bit descriptions. 
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Figure 5-3 Console Transmitter Control/Status Register— (IPR 34,o 22^6) 



Table 5-4 Console Transmitter Data Buffer 



Data Bit 



Name 



<31:8> 

<7> 



<6> 



MBZ 
TXRDY 



TXIE 



<5:3> 
<2> 



MBZ 

MAINT 



<1> 
<0> 



Unused 
XMITBRK 



Description 



These bits read as Os. Writes have no effect. 

Transmitter ready (read-only). Writes have 
no effect. This bit is cleared when TXDB is 
loaded and set when TXDB can receive another 
character. This bit is set on power-up or the 
negation of DCOK. 

Transmitter interrupt enable (read/write). 
When set, this bit causes an interrupt request 
at IPL14 with an SCB offset of FC if TX RDY is 
set. When cleared, interrupts from the console 
receiver are disabled. This bit is cleared on 
power-up or the negation of DCOK. 

Read as Os. Writes have no effect. 

Maintenance (read/wHte). This bit is used to 
facilitate a maintenance self-test. When MAINT 
is set, the external seiial output is set to mark 
and the serial output is used as the serial input, 
"niis bit is cleared on power-up or the negation 
of DCOK. 

This bit reads as 0. Writes have no effect. 

Transmit break (read/write). When this bit 
is set, ttie serial output is forced to the space 
condition after the character in TXDB<7:0> is 
sent. While XMIT BRK is set, the transmitter 
operates normally, but the output line remains 
low. Thus, software can transmit dummy 
characters to time the break. This bit is cleared 
on power-up. 
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5.1.1.4 Console Transmitter Data Buffer— (iPR 35) 

The console transmitter data buffer (TXDB), internal processor register 35, is used to 
buflTer outgoing data on the serial line. Figure 5-4 shows the format of the register. 
Table 5-5 lists the bit descriptions. 
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Figure 5-4 Consoie Transmitter Data Buffer— (iPR 35io 23^6) 
Table 5-5 Consoie Transmitter Data Buffer Bits 

Data Bit Name Description 

<31:8> MBZ Read as 0. Writes have no siffect. 

<7:0> TYansmitted data bits Write only. These bits load the character to be 

transmitted on the console serial line. 



5.1.2 Break Response 

The console serial line unit recognizes a break condition that consists of 20 consecutively 
received space bits. If the console detects a valid break condition, the RCV BRK bit is 
set in the RXDB register. If the break was the result of 20 consecutively received space 
bits, the FRM ERR bit is also set. If halts are enabled, the KA670 halts and transfers 
program control to UVROM location 2004 OOOO16 when the RCV BRK bit is set. RCV 
BRK is cleared by reading RXDB. Another mark, followed by 20 consecutive space bits, 
must be received to set RCV BRK again. 

5.1.3 Baud Rate 

The receive and transmit baud rates are always identical. They are controlled by the 
SSC configuration register bits <14:12>. 

The user selects the desired baud rate through the baud rate select si:gnals that are 
received from an external 8-position switch mounted on the console module (H3604). 
The KA670 firmware reads this code from boot and diagnostic register bits <6:4>, 
complements and loads the code into SSC configuration register bits <:L4:12>. 

Table 5-6 lists the baud rate selections, the corresponding codes as read in the boot 
and diagnostic register bits <6:4>, and the inverted code that should be loaded into SSC 
configuration register bits <14:12>. 



Table 5-6 Baud Rate Selection 
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Baud Rate 



BDR<6:4> 



SSC<14:12> 



300 


111 


000 


600 


110 


001 


1200 


101 


010 


2400 


100 


Oil 


4800 


Oil 


100 


9600 


010 


101 


19200 


001 


110 


38400 


000 


111 



5.1.4 Console Interrupt Specifications 

The console serial line receiver and transmitter both generate interrupts at IPL 14. The 
receiver interrupts with a vector of FSie, while the transmitter interrupts with a vector 
ofFCis. 

5.2 KA670 TOY Clock and Timers 

The KA670 clocks include the time-of-year clock (TODR), a subset interval clock (subset 
IOCS), as defined in the VAX Architecture Reference Manual, and two additional 
programmable timers modeled after the VAX standard interval cjock. 

5.2.1 Time-of-Year Clock (TODR)— EPR 27 

The KA670 time-of-year clock (TODR) forms an unsigned 32-bit binary counter that 
is driven from a 100 Hz oscillator. The least signiiicant bit of the clock represents a 
resolution of 10 milliseconds, with less than 0.0025 percent error. The register counts 
only when it contains a nonzero value. This register is implemented in the SSC chip. 
Figure 5-5 shows the format. 



Time of Year Since Setting 



Figure &-5 Time-of-Year Cloclt (TODR) - (EPR 27^0 1 B^e) 

During a power failure, the time-of-year clock is maintained by battery backup circuitry 
that interfaces through the external connector to a set of batteries mounted on the CPU 
console module. The clock remains valid for greater than 162 hours when using the 
NiCad battery pack (3 batteries in series) mounted on the I/O distribution insert panel . 

The SSC configuration register contains a battery low (BLO) bit. If this bit is set after 
initialization, the TODR is cleared remains at until software writes a nonzero value 
into it. 



NOTE 

After writing a nonzero value into the TODR, software should clear the BLO bit 

by writing a 1 to it. 
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5.2.2 Interval Timer (ICCS)— EPR 24 

The KA670 interval timer (ICCS), internal processor register 24, is implemented 
according to the VAX Architecture Reference Manual. The interval clock control/status 
(ICCS) register is implemented as the standard subset of the standard VAX ICCS in the 
CPU chip. NICR and ICR are not implemented. Figure 5-6 shows the format or the 
ICCS register. Table 5-7 lists the bit descriptions. 
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Figure 5-6 Interval Timer (ICCS) - (EPR 24io 1 ^^&) 
Table 5-7 Interval Timer Bits 



Data Bit 



Name 



Description 



<31:7> 



<6> 



MBZ 



IE 



<5:0> 



MBZ 



Read as Os. Must be written as 
Os. 

Interrupt enable (read/write). 
This bit enabtles and disables the 
interval timer interrupts. When 
the bit is set, an interval timer 
interrupt is requested every 10 
msec, with an error of less than 
0.01 percent. When the bit is 
clear, intervaJ timer interrupts 
are disabled. This bit is cleared 
on power-up. 



Read as Os. 
Os. 



Must be written as 



Interval timer requests are posted at IPL 16 with a vector of CO. The interval timer is 
the highest priority device at this IPL. 



5.2.3 Programmable Timers 

The KA670 features two programmable timers. Although modeled after the VAX 
standard interval clock, the timers are accessed as I/O space registers rather than as 
internal processor registers. Also, an added control bit stops the timer upon overflow. If 
so enabled, the timers will interrupt at IPL 14 upon overflow. The interrupt vectors are 
programmable, and are set to 78 and 7C by the firmware. 

Each timer is composed of four registers: 

Timer n control register 
Timer n interval register 
Timer n next interval register 
Timer n interrupt vector register 
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n represents the timer number (0 or 1). 



5.2.3.1 Timer Control Registers (TCRO and TORI) 

The KA670 has two timer control registers— one for controlling timer (TCRO), and one 
for controlling timer 1 (TORI). TCRO is accessible at address 2014 OlOOig, and TCRl is 
accessible at 2014 OllOie- These registers are implemented in the SSC chip. Figure 5-7 
shows the format. Table 5-8 lists the bit descriptions. 
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Figure 5-7 Timer Control Registers (TCRO and TCRl) 



Table 5-8 Timer Control Register Bits 



Date Bit 



Name 



<31> 



<30:8> 

<7> 



<6> 
<5> 

<4> 

<3> 
<2> 

<1> 



Description 



ERR Error (read/write to clear). This bit is set whenever the timer 

interval register overflows and the INT bit is already set. Thus, 
the ERR bit indicates a missed overflow. Writing a 1 to this bit 
clears the bit. ERR is cleared on power-up. 

MBZ Read as Os. Must be written as Os. 

INT Interrupt (read/wrrite to clear). This bit is set whenever the 

timer interval register overflows. If IE is set when INT is set, 
an interrupt is posted at IPL 14. Writing a one to this bit clears 
the bit. INT is cleared on power-up. 

IE Interrupt enable (read/write). When this bit is set, the timer will 

interrupt at IPL 14 when the INT bit is set. IE is cleared on 
power-up. 

SGL Read/write. Setting this bit causes the timer interval register to 

be incremented by 1 if the RUN bit is cleared. If the RUN bit is 
set, then writes to the SGL bit are ignored. SGL is always read as 
0. SGL is cleared on power-up. 

XFR Transfer (read/write). Setting this bit causes the timer next 

interval register to be copied into the timer interval register. XFR 
is always read as 0. XFR is cleared on power-up. 

MBZ Read as Os. Must be written as Os. 

STP Stop (read/write). This bit determines whether the timer stops 

after an overflow, when the RUN bit is set. If the STP bit is set at 
overflow, the RUN bit is cleared by the hardware at overflow and 
counting stops. STP is cleared on power-up. 

MBZ Read as Os. Must be written as Os. 
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Table 5-8 (Cont.) Timer Control Register Bits 



Date Bit Name Description 



<0> RUN Run (read/write). When set, the timer interval register is 

incremented once every microsecond. The INT bit is set when 
the timer overflows. If the STP bit is set at overflow, the RUN bit 
is cleared by the hardware at overflow and counting stops. When 
the RUN bit is clear, the timer interval register is not incremented 
automatically. RUN is cleared on power-up. 

5.2.3.2 Timer Interval Registers (TIRO and TIRl) 

The KA670 has two timer interval registers — one for timer (TIRO), and one for timer 1 
(TIRl). TIRO is accessible at address 2014 0104i6, and TIRl is accessible at 2014 0114i6. 

The timer interval register is a read-only register containing the interval count. When 
the RUN bit is 0, writing a 1 increments the register. When the RUN bit is 1, the register 
is incremented once every microsecond. 

When the counter overflows, the INT bit is set; an interrupt is posted at IPL14 if the 
IE bit is set. Then, if the RUN and STP bits are both set, the RUN bit is cleared and 
counting stops. Otherwise, the counter is reloaded. The maximum delay that can be 
specified is approximately 1.2 hours. This register is cleared on power-up. Figure 5-8 
shows the format of the registers. 
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Figure 5-8 Timer interval Registers (TIRO and TIRl) 

5.2.3.3 Timer Next Interval Registers (TNIRO and TNIRi) 

The KA670 has two timer next interval registers — one for timer (TNIRO), and one for 
timer one (TNIRI). TNIRO is accessible at address 2014 OlOSie, and TNIRI is accessible 
at 2014 OII816. These registers are implemented in the SSC chip. Figure 5-9 shows the 
format of the registers. 

These read/write registers contain the value written into the timer interval register after 
overflow or in response to a 1 written to the XFR bit. The timer next interval registers 
are cleared on power-up. 
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Figure 5-9 Timer Next interval Registers (TNIRO and TNIRI) 

5.2.3.4 Timer Interrupt Vector Registers (TIVRO and TIVR1) 

The KA670 has two timer interrupt vector registers — one for timer (TIVRO), and one for 
timer 1 (TIVRl). TIVRO is accessible at address 2014 OlOCis, and TWRl is accessible at 
2014 OllCje- These registers are implemented in the SSC chip. The resident firmware 
sets TIVRO to 78i6 and TIVRl to 7Ci6. Figure 5-10 shows the format. 
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These read/write register contain the timer's interrupt vector. Bits <31:10> and <1:0> are 
read as and must be written as 0. When TCRn<6> (IE) and TCRn<7> (INT) transition 
to 1, an interrupt is posted at IPL 14. When a timer's interrupt is acknowledged, the 
content of the interrupt vector register is passed to the CPU, and the INT bit is cleared. 
Interrupt requests can also be cleared by clearing either the IE or INT bit. The timer 
interrupt vector registers are cleared on power-up. 

3 

1 10 9 2 10 



I MBZ 


Interrupt Vector 


MBzl 



Figure 5-10 Timer Interrupt Vector Registers (TIVRO and TIVRl) 

NOTE 

Note that both timers interrupt at the same EPL as the console serial line 
unit, IPL 14. When multiple interrupts are pending, the console serial line has 
priority over the timers, and timer has priority over timer 1. 

5.3 KA670 Bus Overview 

The KA670 has three major buses: 

• Data address lines (RDAL) 

• Peripheral (CP) 

• G-chip memory interconnect (GMI) 

5.3.1 RDAL Bus 

The RDAL bus connects the CPU, FPA, and backup cache chip to the memory controller. 
The KA670 supports the following components on the RDAL bus: 

• Four of the five core chips (plus memory controller): 

— CPU chip (P-chip) 

— Clock chip (CLK-chip) 

— Floating point accelerator chip (F-chip) 

— Backup cache controller chip (C-chip) 

— Memory controller chip (G-chip) 

The KA670 does not support the following components on the RDAL bus: 

• System support chip (SSC) 

• Any other peripheral components 
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5.3.2 The CP Bus 

The CP bus connects the I/O subsystem to the memory controller. The I<A670 depends on 
and supports the following components on the CP bus: 

Clock chip (CCLOCK DC509) 

Q22-bus adapter chip (CQBIC DC527) 

Second-generation Ethernet controller chip (SGEC DC541) 

Single host adapter chip (SHAC DC542) 

System support chip (SSC DC511) 

CP bus arbiter (ARB chip) 

The KA670 does not support the following components on the CP bus: 

90 ns memory controller (CMCTL DC357) 

60 ns memory controller (CMCTL DC557) 

CPU chip (DC341) 

Graphics and system support chip (GSSC) 

5.3.2.1 The CCLOCK Chip 

This chip generates the precision MOS clock signals needed to operate the the G-chip and 
other core peripheral chips in synchronization with the CP bus. In addition, the CCLOCK 
chip provides two synchronizers for synchronizing asynchronous DMA functions to the 
CP bus. 

5.3.2.2 CP Bus Arbiter 

The CP bus arbiter (ARB chip) controls which peripheral device is granted CP bus 
mastership. The CP bus does not support DMA grant daisy-chaining, so the ARB chip 
receives separate requests from each device and issues a separate grant to each device. 
The arbiter must give the CQBIC the highest priority. Then the G-chip must be given the 
second highest priority. The third highest priority goes to the SGEC. The arbiter then 
uses a round-robin priority mechanism for the two SHACs. 

5.3.3 GMIBUS 

The GMI bus creates a path between the memory controller and main memory. There are 
two chips that support the memory subsystem: 

• Memory controller chip (G-chip DC561) 

• G-chip memory interface chip (GMX DC562) 
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The KA670 boot and diagnostic facility features two registers, 256 kilobytes of erasable 
programmable read only memory (EPROM) and 1 kilobyte of battery backed up RAM. 
The EPROM and battery backed up RAM may be accessed with longword, word, or byte 
references. 

The 256 kilobytes of EPROM contain the resident firmware. If this EPROM is 
reprogrammed for special applications, the new code must initialize and configure the 
board, and provide halt and console emulation, as well as boot diagnostic functions. 

6.1 Boot and Diagnostic Register (BDR) 

The boot and diagnostic register (BDR) is a longword-wide register, located in the VAX 
I/O page at physical addresses 2008 4000 to 2008 407Ci6. The register is implemented 
uniquely on the KA670. The register can be accessed by KA670 software, but not by 
external Q22-bus devices. The BDR allows the boot and diagnostic firmware as well as 
the operating system to read various KA670 configuration bits. 

The low byte and upper word of the BDR present the same information in each of the 32 
successive longwords. The second byte (bits <15:8>) provides a byte of the IAN station 
address in each successive longword. Note that only the first 8 bytes contain the station 
address. The next 24 bytes are for testing purposes. Figure 6-1 shows the format for the 
boot and diagnostic register. Table 6-1 lists the bit descriptions. 
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Figure 6-1 Boot and Diagnostic Register (BDR) 
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Table 6-1 Boot and Diagnostic Register Bits 



Data Bit 



Name 



Description 



<31> 



Etherboot 



<30> 



CableOK 



<29:27> 
<26:24> 

<23:19> 
<18:16> 

<15:8> 



Undefined 
DSSU 

Undefined 
DSSI2 

Station_address 



<7> 



HLTENB 



Enable Ethernet remote boot. This bit reflects 
the current setting of the enable Ethernet 
remote boot jumper on the console module 
(H3604). If the setting is 0, remote Ethernet 
boots are enabled. If this bit is 1, remote 
Ethernet boots requests are ignored. 

Console module cable okay. When this bit 
is 0, there is a high probability that the 
console module cable is functioning correctly. 
If this bit is 1, the console module cable is 
either malfunctioning or plugged in the wrong 
orientation. This bit is determined by sending a 
signal to the console module over one path and 
reading it back over another path on the cable. 

Should not be read or written. 

This field contains the DSSI node number for 
the external DSSI bus (the bus that is accessed 
through the console module). 

Should not be read or written. 

This field contains the DSSI node number for 
the internal DSSI bus (the bus that is accessed 
through the backplane connector). 

The KA670'3 hardware LAI'^ station address 
EPROM is accessed by reatling the BDR several 
times at successive addresses. The encoding for 
the station address is as follows: 



BDR + 00: 
BDR + 04: 
BDR + 08: 
BDR + OC: 
BDR + 10: 
BDR + 14: 
BDR + 18: 
BDR + IC: 



SA byte 
SA byte 1 
SA byte 2 
SA byte 3 
SA byte 4 
SA byte 5 
Checksum byte 
Checksum byte 1 



The last 24 bytes are for testing purposes. 

Halt enable (read-only). Writes have no effect. 
This bit reflects the state of the BREAK 
ENABLE switch on the console module (H3604). 
When asserted, this signal enables the halting 
of the CPU upon detection of a console break 
condition. 

On a power-up, the KA670 resident firmware 
reads the HLT ENB bit to decide whether to 
enter the console emulation program (HLT ENB 
set) or to boot the operating system (HLT ENB 
clear). When a HALT instniction is executed in 
kernel mode, the resident iSrmware reads the 
HLT ENB bit to decide whether to enter the 
console emulation program (HLT ENB set) or to 
restart the operating system (HLT ENB clear). 
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Table 6-1 (Cont.) Bcx)t and Diagnostic Register Bits 



Data Bit 



Name 



Description 



<6:4> 



BRSCD 



Baud rate select (read-only). Writes have no 
effect. These three bits originate from the 
console module's (H3604) baud rate select 
switch. They reflect the baud rate setting, as 
listed in the following table: 



BDR<6:4> Baud Rate 



111 


300 


no 


600 


101 


1200 


100 


2400 


on 


4800 


010 


9600 


001 


19200 


000 


38400 



<3> 



Man test mode 



<2> 
<1:0> 



MHO 
BOG CD 



Manufacturing test mode (read-only). Writes 
have no effect. When set, the KA670 is in 
normal run mode. When set (by grounding a 
test point on the backplane), the KA670 is in 
manufacturing test mode. In this mode, special 
diagnostic test script on run. 

Must be one (read-only). Writes have no effect. 

Boot and diagnostic code (read-only). Writes 
have no effect. This 2-bit field reflects the 
setting of the power-up mode switch on the 
console module (H3604). The KA670 firmware 
programs use BDG_CD <1:0> to determine the 
power-up mode, as listed in the following table: 



BDR<1:0> Power-Up Mode 


11 


Run 


10 


Language inquiry 


01 


Ifest 


00 


Unused 



6.2 Diagnostic LED Register (DLEDR) 

The diagnostic LED register (DLEDR), address 2014 OOSOie, is implemented in the SSC 
chip. The register contains four read/write bits that control the external LED display. A 
in a bit turns on the corresponding LED. All four bits are cleared on power-up or the 
negation of DCOK, to provide a power-up lamp test. Figure 6-2 shows the format of the 
register. Table 6-2 lists the bit descriptions. 
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I/O Address: 2014 0030 
Longword Read/Write Access 



Figure 6-2 Diagnostic LED Register (DLEDR) 
Tabie 6-2 Diagnostic LED Register Bits 



Data 

Bit Name Description 

<31:4> MBZ Read as Os. Must be written as Os. 

<3:0> DSPL Display (read/write). These four bits update an external LED display. 

Writing a to a bit turns on the corresponding LED. VWting a 1 to a bit 
turns the LED off. The display bits are cleared (all LEDs are turned on) on 
power-up or the negation of DCOK. 



6.3 EPROM Memory 

The KA670 has 266 kilobytes of EPROM memory for storing code for board initialization, 
VAX standard console emulation, board self-tests, and boot code. EPROM memory may 
be accessed through byte, word, and longword references. EPROM read accesses take 250 
ns. The EPROM is organized as a 128K x 8-bit array. CP bus parity is neither checked 
nor generated on EPROM references. 

NOTE 

The EPROM size must be set in the SSC configuration register before 
attempting to reference outside the first 8-kilobyte block of the local EPROM 
space. (2004 0000 to 2004 IFFFig) 

6.3.1 EPROM Address Space 

The entire 256-kiIobyte boot and diagnostic EPROM can only be read in the 256-kilobyte 
halt protect EPROM space (2004 0000 to 2007 FFFFie). 

NOTE 

There is no concept of halt unprotect space on the KA670 (as used on previous 

Q22-bus MicroVAX systems). 

Any I-stream read from the EPROM space places the KA670 in halt mode. The Q22- 
bus SRUN signal is deasserted, which turns oiF the front panel RUN light. The CPU is 
protected from further halts. 

Writes and D-stream reads to any address space have no effect on the run mode/halt 
mode status. 

NOTE 

The KA670 logic that controls halt mode/run mode cannot det<ict I-stream 
read references that hit the primary cache. Therefore, halt mode/run mode 
is unaffected by these cache hits. 
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6.3.2 KA670 Resident Firmware Operation 

The KA670 CPU module's 256-kilobyte EPROM contains the resident firmware. The 
firmware can be entered by transferring program control to location 2004 OOOOig- 

Section 9.3.1 lists the various halt conditions that cause the KA670 to transfer program 
control to location 2004 0000 is . 

When running, the resident firmware provides the services expected of a VAX-11 console 
system. In particular, the following services are available: 

• Automatic restart or bootstrap following processor halts or initial power-up 

• An interactive command language that allows the user to examine and alter the state 
of the processor 

• Diagnostic tests run at power-up to check out the CPU, the memory system, and the 
Q22-bus map 

• Support of video or hardcopy terminals as the console terminal 

6.3.2.1 Power-Up Modes 

The boot and diagnostic EPROM programs use boot and diagnostic code <1:0> 
(Section 9.9) to determine the power-up modes listed in Table 6-3. 

Table 6-3 Power-Up Modes 

Code Power-Up Mode Description 

11 Run (factory setting) If the console terminal supports the DEC multinational 

character set, the user is prompted for a language if the 
time-of-year clock battery backup has failed, or SSC RAM 
is corrupted or unintialized (first power-up). Full startup 
diagnostics are run. 

01 Language inquiry If the console terminal supports the DEc multinational 

character set, the user is prompted for a language on 
every power-up and restart. Full startup diagnostics are 
run. 

10 Ttest EPROM programs run wraparound serial line unit (SLU) 

tests. 

00 Unused. 



6.4 Battery Backed-Up RAM 

The KA670 contains 1 kilobyte of battery backed-up static RAM (found in the SSC), for 
use as a console scratchpad. This RAM supports byte, word, and longword references. 
Read operations take 700 ns to complete. Write operations require 600 ns. The RAM is 
organized as a 256 x 32-bit (one-longword) array. The array appears in a 1-kilobyte block 
of the VAX I/O page, at addresses 2014 0400 to 2014 07FFi6. This array is not protected 
by parity; CP bus parity is neither checked nor generated on reads or writes to this RAM. 
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6.5 KA670 Initialization 

The VAX architecture defines three kinds of hardware initialization: 

• Power-up initiaHzation 

• I/O bus initialization 

• Processor initiaHzation 

6.5.1 Power-Up Initialization 

Power-up initialization is the result of restoring power. Initialization iincludes a hardware 
reset, processor initialization, I/O bus initialization, and the initialization of several 
registers defined in the VAX Architecture Reference Manual. 

6.5.2 Hardware Reset 

A KA670 hardware reset occurs on power-up or the negation of DCOK. A hardware 
reset initiates the hardware halt procedure (Section 3.1.6.6) with a halt code of 03. The 
hardware reset also initializes some IPRs and most I/O page registers to a known state. 
Those IPRs aflfected by a hardware reset are noted in Section 3.1.1.3. The description for 
each I/O space register describes the efiFect of a hardware reset on that register. 

6.5.3 I/O Bus Initialization 

An I/O bus initialization occurs on power-up, the negation of DCOK, or as the result of 
an MTPR to IPR 55 (lORESET) or console UNJAM command. An I/O bus initialization 
clears the interprocessor communication (IPCR) and DMA system error (DSER) registers. 
It also causes the Q22-bus interface to acquire both the CP bus and Q22-bus, then assert 
the Q22-bus BINIT signal. The assertion of BINIT on the Q22-bus does not effect the 
KA670. 

6.5.3.1 I/O Bus Reset Register (IPR 55) 

The I/O bus reset register (lORESET), IPR 55io is implemented in the SSC chip. An 
MTPR of any value to the lORESET register causes an I/O bus initialization. Note that 
the second generation Ethernet controller chip (SGEC) and single host adapter chip 
(SHAC) are not reset by MTPRs to IPR 55. 

6.5.4 Processor Initialization 

A processor initialization occurs 

• On power-up 

• On the negation of DCOK 

• As the result of a console INITIALIZE command 

• After a halt caused by an error condition 

In addition to initializing those registers defined in the VAX Architecture Reference 
Manual, the KA670 firmware must also configure main memory, the local I/O page, and 
the Q22-bus map during a processor initialization. 
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6.5.4.1 Configuring the Local I/O Page 

The following registers control the configuration of the KA670 local I/O page. They 
are unique to CPU designs that use the system support chip (SSC), and they must be 
configured by the firmware during a processor initialization. 

• SSC base address register 

• BDR address decode match register 

• BDR address decode mask register 

• SSC configuration register 

• CP bus timeout register 

6.5.5 SSC Base Address Register (SSCBR) 

The SSC base address register, address 2014 OOOOie, controls the base addresses of a 
2-kilobyte block of the local I/O space that includes the the following: 

Battery backed-up RAM 

Registers for the programmable timers 

BDR address decode match and mask registers 

Diagnostic LED register 

CP bus timeout register 

A set of diagnostic registers that allow several EPRs to be accessed using I/O page 
addresses. 

This read/write register is set to 2014 OOOOie on power-up or the negation of DCOK 
Bits SSCBR<31:30,10:0> are unused. They read as Os, and must be written as Os. 
SSCBR<29> is read as 1 and must be written as 1. This register should also be set 
to 2014 0000)6 by firmware during processor initialization. Figure 6-3 shows the format 
ofthe SSCBR register. 
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Figure 6-3 SSC Base Address Register (SSCBR) 

6.5.6 BDR Address Decode Match Register (BDMTR) 

The BDR address decode match register, address 2014 0140i6, controls the base address 
of the BDR. This read/write register is cleared on power-up or the negation of DCOK. 
BDMTR<31:30,1:0> are unused. They read as Os, and must be written as Os. This 
register should be set to 2008 4000i6 by firmware during processor initialization. 
Figure 6-4 shows the format of the BDMTR register. 
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Figure 6-4 BDR Address Decode Match Register (BDMTR) 
6.5.7 BDR Address Decode Mask Register (BDMKR) 

The BDR address decode mask register, address 2014 0144 \q, controls the range of 
addresses that the BDR responds to. An example is the number of copies of the BDR that 
appear in the physical address space. 

This read/write register is cleared on power-up or the negation of DCOK Bits 
BDMKR<31:30,1:0> are unused. They read as Os, and must be written as Os. This 
register should should be set to 0000 007C le (32 copies of the BDR) by firmware during 
processor initialization , because successive bytes of the KA670's LAN station address are 
read using the BDR. Figure 6-5 shows the format of the BDMKR register. 
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Figure 6-5 BDR Address Decode Masli Register (BDIUIKR) 

NOTE 

The KA670 uses only one of the SSC's address strobes. The other strobe's control 
registers (located at 2014 OlSOje and 2014 0134i6) are reserved; they should not 
be accessed, because they could cause unpredictable behavior; 

6.5.8 SSC Configuration Register (SSCCR) 

The SSC configuration register, address 2014 OOlOie, controls the setup parameters for 
the console serial line, programmable timers, EPROM, TOY clock and BDR register. 
Figure 6-6 shows the format of the SSC configuration register. Table 6-4 lists the bit 
descriptions. 
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Figure 6-6 SSC Configuration Register (SSCCR) 
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Table 6-^ SSC Configuration Register Bits 



Data Bit 



Name 



Description 



<31> 



<30:28> 
<27> 



<26> 
<25:24> 



BLO 



MBZ 
IVD 



MBZ 

IPL_ 
LVL SEL 



<23> 



<22:20> 



<18:16> 



RSP 



ROM. 
SIZE. 
SEL 



HALT 
PROT 
SPACE 



<15> 



CTP 



Battery low (read/write). If the battery voltage goes below threshold 
while the module is powered down, this bit is set on power-up, after 
the assertion of DCOK after the assertion of POK. Once set, this bit 
can only be cleared by software writing it as 1. If this bit is set, then 
the TOY clock will be cleared by power-up or the negation of DCOK. 

Read as Os. Must be written as Os. 

Interrupt vector disable (read/write). When this bit is set, the console 
serial line and programmable timers do not respond to interrupt 
acknowledge cycles. IVD is cleared on power-up, the negation of 
DCOK, or a processor initialization. 

Read as Os. Must be written as Os. 

IPL level select (read/write). These bits specify the IPL level 
of interrupt acknowledge cycle that the console serial line and 
programmable timers respond to. These bits must be cleared 
(programmed to OO2) in order for the console serial line and 
programmable timers to respond to interrupt acknowledge cycles 
that they generated (IPL 14). These bits are cleared on power-up, the 
negation of DCOK, or a processor initialization. 

ROM speed (read/write). This bit selects the EPROM access time. 
This bit must be set for the KA670 EPROMs to run at maximum 
speed. This bit is cleared on power-up or the negation of DCOK. The 
bit must be set to 1 by a processor initialization. 

EPROM address space size select (read/vrate). These bits control the 
size of the range of addresses that the EPROM responds to. These 
bits must be set to IOI2 because the KA670 contains 256 Kbytes of 
EPROM, yielding an address range of 256 Kbytes (2004 0000 to 2007 
FFFFis). These bits are cleared on power-up or the negation of DCOK, 
yielding an address range of 8 Kbytes (2004 0000 —2004 iFPFis). 
These bits must be set to the proper value by a processor initialization. 

EPROM halt protect address space size select (read/write). These bits 
control the size of the halt mode address range. These bits must be 
set to IIO2 because the KA670's 256 Kbyte EPROM yields a halt mode 
address range of 256 Kbytes (2004 0000—2007 FFFFie). These bits 
are cleared on power-up or the negation of DCOK. These bits must 
be set to the proper value by a processor initialization. Note that any 
instruction fetch from the EPROM puts the KA670 in halt protect 
mode. 



Control P enable (read/write). When this bit is set, typing |Ctrl| 
the console will halt the CPU if halts are enabled (BDR<7> set) 



en 



this bit is cleared, typing , 

halts are enabled (BDR<7'> set) 
negation of DCOK. 



Break I at the console will halt the CPU if 
CTP is cleared on power-up or the 
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Table 6-4 (Com.) SSC Configuration Register Bits 



Data Bit 



Name 



Description 



<14:12> CT Console terminal baud rate select (read/write). These bits select the 

BAUD baud rate of the console terminal serial line. They are cleared on 

SELECT power-up or the negation of DCOK. They should be loaded from the 
complement of BDR<6:4> by the processor initialissation code. The 
codes correspond to selected baud rates, as listed in the following 
table: 



SSCCR<14:12> Baud Rate 



000 
001 
010 

oil 

100 
101 
110 

111 



300 

600 

1200 

2400 

4800 

9600 

19200 

38400 



<11:7> MHZ Read as 0. Must be written as 0. 

<6:4> BDR EN BDR enable (read/write). These bits enable the BDR. To enable the 

BDR, these bits must be set to III2 by a processor initialization .They 
are cleared on power-up or the negation of DCOK. 

<3:0> MBZ Read as 0. Must be written as 0. 



NOTE 

The SSC baud clock runs about 1.7 percent fast, within the VAX standard 

mandated accuracy. This is due to the accuracy of the crystal oscillator. 



6.6 CP Bus Timeout Control Register (CBTCR) 

The CP bus timeout register, address 2014 0020i6, controls the amount of time allowed 
to elapse before a CP bus cycle is aborted by the SSC. Note that the Gr-chip also has a 
CP bus timeout mechanism that will prevent most bus-initiated CP bus transactions to 
nonexistent I/O or EPR addresses, or to interrupt vectors, from hanging the bus. 

The G-chip's timer uses a NOR of all the CP bus DMA devices "not me" as an indicator 
of a pending NXM address. In an extreme case of a broken CP bus KMA device that 
says it will respond (does not assert the CP bus "not me") but does not respond, the 
CBTCR overflows; this causes a machine check, which prevents the system from hanging. 
Figure 6-7 shows the CBTCR format. Table 6-5 lists the bit descriptions. 
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Figure 6-7 CP Bus Timeout Control Register (CBTCR) 



Table 6-5 CP Bus Timeout Control Register Bits 



Data Bit Name 



<31> 



<30> 



<29:22> 
<23:0> 



BTO 



RWT 



MBZ 



Description 



CP bus timeout (read/write to clear). This bit is set when the bus 
timeout interval set in bits <23:0> has expired during any CP bus 
cycle. BTO is cleared by writing a 1, by a power-up, or by the 
negation of DCOK. 

CP bus read/write timeout (read/write to clear). This bit is set 
when the bus timeout interval set in bits <23:0> has expired 
during a CPU or DMA read or write cycle on the CP bus. This 
bit is cleared by writing a 1, by a power-up, or by the negation of 
DCOK. 



Read as Os. Must be written as Os. 

Bus timeout Read/write. These bits are used to program the desired timeout 

interval period. The available range of 1 to FFPFFFis corresponds to 

a selectable timeout range of 1 microsecond to 16.77 seconds, 
in 1-microsecond increments. Writing a to this field disables 
the bus timeout function. The BTO bit is used to signify that a 
bus timeout has occurred. This field is cleared on power-up or 
the negation of DCOK. This register should be loaded with 0000 
4000i6 on a processor initialization, for a timeout value of 15 
milliseconds. 
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The KA670 module has interfaces for the Q22-bus, the Ethernet, and a mass storage bus. 
This chapter describes the three interfaces. 

7.1 KA670 Q22-bus Interface 

The KA670 includes a Q22-bus interface implemented with a single VLSI! chip called the 
CQBIC. The chip contains a CP bus to Q22-bus interface that supports the following: 

• A programmable mapping function (scatter-gather map) for translating 22-bit, Q22- 
bus addresses into 29-bit CP addresses. This function allows any pagu in the Q22-bus 
memory space to be mapped to any page in main memory. 

• A direct mapping function for translating 29-bit CP addresses in the local Q22-bus 
address space and local Q22-bus I/O page into 22-bit Q22-bus addresses. 

• Masked and unmasked longword reads and writes from the CPU to the Q22-bus 
memory and I/O space, and to the Q22-bus interface registers. Longword reads and 
writes of the local Q22-bus memory space are buffered and translated into 2-word, 
block mode transfers on the Q22-bus. Longword reads and writes of the local Q22-bus 
I/O space are buflFered and translated into two single-word transfers on the Q22-bus. 

• Up to 16-word, block mode writes from the Q22-bus to main memory. These words 
are buffered, then transferred to main memory by using two asynchronous DMA 
octaword transfers. For block mode writes of less than 16 words, the words are 
buffered and transferred to main memory by using the most efficient combination 
of octaword, quadword, and longword, asynchronous DMA transfers. The maximum 
write bandwidth for block mode references is 3.3 Mbytes/s. 

Block mode reads of main memory from the Q22-bus cause the Q22-bus interface to 
perform an asynchronous DMA quadword read of main memory and buffer all four 
words. So, on block mode reads, the next three words of the block mode read can 
be delivered without any additional CP cycles. The maximum read bandwidth for 
Q22-bus block mode references is 2.4 Mbytes/s. Q22-bus burst mode DMA transfers 
result in single-word reads and writes of main memory. 

• Transfers from the CPU to the local Q22-bus memory space that result in the Q22- 
bus map translating the address back into main memory (local-miss, global-hit 
transactions). 

The Q22-bus interface contains several registers for Q22-bus control and configuration, 
interprocessor communication, and error reporting. 

The interface also contains Q22-bus interrupt arbitration logic that reco^piizes Q22-bus 
interrupt requests BR7 to BR4 and translates them into CPU interrupts at levels 17 to 

14. 
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The Q22-bus interface detects Q22-bus NOSACK timeouts, Q22-bus interrupt 
acknowledge timeouts, Q22-bus nonexistent memory timeouts, main memory errors 
on DMA accesses from the Q22-bus, ar d Q22-bus device parity errors. 

7.1.1 Q22-bus to Main Memory Address Translation 

On DMA references to main memory, the 22-bit Q22-bus address must be translated into 
a 29-bit main memory address (Figure 7-1.) This translation process is performed by the 
Q22-bus interface, using the Q22-bus map. This map contains 8192 mapping registers, 
one for each page in the Q22-bus memory space. Each of these registers can map a 
page (512 bytes) of the Q22-bus memory address space into any of the 1024K pages in 
main memory. Since local I/O space addresses cannot be mapped to Q22-bus pages, the 
local I/O page is unaccessible to devices on the Q22"bus. Figure 7-1 shows how Q22-bus 
addresses are translated into main memory addresses. 
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Figure 7-1 Q22>bus Address Translation 

At power-up, the Q22-bus map registers (including the valid bits) are undefined. External 
access to main memory is disabled as long as the interprocessor communication register's 
LM EAE bit is cleared. The Q22-bus interface monitors each Q22-bus cycle and responds 
if the following tiiree conditions are met: 

1. The interprocessor communication register's LM EAE bit is set. 

2. The valid bit of the selected mapping register is set. 

3. During read operations, the mapping register must map into existent main memory, 
or a Q22-bus timeout occurs. (During write operations, the Q22-bus interface returns 
Q22-bus BRPLY before checking for existent local memory. The response depends 
only on conditions 1 and 2 above). If the location pointed to by a valid MAP entry 
does not exist, MEMERR on the CP bus is asserted to cause an interrupt at IPL ID. 
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NOTE 

In the case of local-miss, global-hit transactions, the state of the LM EAE bit 
is ignored. A local-miss, global-hit is defined as follows. A CPU access of Q22- 
memory is mapped to main memory (global hit). However, the map entry for the 
Q22 address is not stored in the CQBIC's map cache (local miss). As a result, the 
map entry is read in memory before the original access can complete. 

If the map cache does not contain the needed Q22-bus map register, then the Q22- 
bus interface performs an asynchronous DMA read of the Q22-bus map register before 
proceeding with the Q22-bus bus DMA transfer. 

7.1.1.1 Q22-bus Map Registers (QMR) 

The Q22-bus map contains 8192 registers that control the mapping of Q22-bus addresses 
into main memory. Each register maps a page of the Q22-bus memory space into a page 
of main memory. These registers are implemented in a 32-kilobyte block of main memory, 
but are accessed through the CQBIC chip by using a block of addresses in the I/O page. 

The local l/'O space address of each register was chosen so that register address bits 
<14:2> are identical to Q22-bus address bits <21:9> of the Q22-bus page that the register 
maps. Table 7-1 lists the register addresses. 



Table 7-1 Q22-bus Map Register Addresses 



Register Address 



Q22-bua Addresses 



Mapped (Hex) 



Mapped (Octal) 



2008 8000 
2008 8004 
2008 8008 
2008 800C 
2008 8010 
2008 8014 
2008 8018 
2008 801C 



00 0000 to 00 OlFF 
00 0200 to 00 03PF 
00 0400 to 00 05PF 
00 0600 to 00 07FF 
00 0800 to 00 09FF 
00 OAOO to 00 OBFF 
00 OCOO to 00 ODFF 
00 OEOO to 00 OPFF 



00 000 000 to 00 000 777 
00 001 000 to 00 001 777 
00 002 000 to 00 002 777 
00 003 000 to 00 003 777 
00 004 000 to 00 004 777 
00 005 000 to 00 005 777 
00 006 000 to 00 006 777 
00 007 000 to 00 007 777 



2008 FFFO 
2008 FPF4 
2008 PFF8 
2008 PFFC 



3F F800 to 3P F9FF 
3P FAOO to 3F PBFF 
3F FCOO to 3F FDFF 
3F FAOO to 3F FFFF 



17 774 000 to 17 774 777 
17 775 000 to 17 775 777 
17 776 000 to 17 776 777 
17 776 000 to 17 777 777 



Figure 7-2 shows the format of the Q22-bus map registers (QMRs). Table 7-2 lists the 
bit descriptions. 
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Figure 7-2 Q22-bus Map Register Format 
Table 7-2 Q22-bus Map Register Bits 



Data Bit 



Name 



Description 



<31> 



<30:20> 
<19:0> 



Unused 
A28 to A9 



Valid (read/write). When a Q22-bus map register is 
selected by bits <21:9> of the Q22-bu8 address, the valid bit 
determines whether mapping is enabled for that Q22-bus 
page. If the valid bit is set, the mapping is enabled; Q22- 
bus addresses within the page controlled by the register 
are mapped into the main memory page determined by bits 
<28:9>. 

If the valid bit is clear, the mapping register is disabled; the 
Q22-bu8 interface does not respond to addresses within that 
page. This bit is undefined on power-up or the negation of 
DCOK. 

These bits always read as and must be written as 0. 

Address bits <28:9> (read/write). When a Q22-bu3 map 
register is selected by a Q22-bus address, and that 
register's valid bit is set, then these 20 bits are used as 
main memory address bits. Q22-bus address bits <8:0> are 
used as main memory address bits <8:0>. These bits are 
undefined on power-up or the negation of DCOK. 



7.1.1.2 Accessing ttie Q22-bus Map Registers 

Although the CPU accesses the Q22-bus map registers by using aligned longword 
references to the local I/O page (addresses 2008 8000 to 2008 FFFC le), the map actually 
resides in a 32-kilobyte block of main memory. The starting address of this block is 
controlled by the contents of the Q22-bus map base register. The Q22-bus interface also 
contains a 16-entry, fully associative, Q22-bus map cache to reduce the number of main 
memory accesses required for address translation. 

NOTE 

The system software must protect the pages of memory that contain the Q22-bus 
map from direct accesses that will corrupt the map or cause the entries in the 
Q22-bus map cache to become stale. Either of these conditions will make the 
mapping fiuiction work incorrectly. 

When the CPU accesses the Q22-bus map through the local I/O page addresses, the 
Q22-bus interface reads or writes the map in main memory. The Q22-bus interface does 
not have to gain Q22-bus mastership when accessing the Q22-bus map. Because these 
addresses are in the local I/O space, they are not accessible from the Q22-bus. 

On a Q22-bus map read by the CPU, the Q22-bus interface decodes the local I/O 
space address (2008 8000 to 2008 FFFCie). If the register is in the Q22-bus map 
cache, the Q22-bus interface internally resolves any conflicts between CPU and Q22- 
bus transactions (if both are trying to access the Q22-bus map cache entries at the same 
time), then returns the data. 
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If the map register is not in the map cache, the Q22-bus inteiface will force the CPU to 
retry, acquire the CP bus, and perform an asynchronous DMA read of the map register. 
When the read is complete, the CPU is provided with the data when its read operation is 
retried. A map read by the CPU does not cause the register that was read to be stored in 
the map cache. 

On a Q22-bus map write by the CPU, the Q22-bus interface first latches the data. 
On the completion of the CPU write, the interface acquires the CP bus and performs 
an asynchronous DMA write to the map register. If the map register is in the Q22-bus 
map cache, then the CAM valid bit for that entry is cleared to prevent the entry from 
becoming stale. A Q22-bus map write by the CPU does not update any cached copies of 
the Q22-bus map register. 

7.1.1.3 The Q22-bus Map Cache 

To speed up the process of translating Q22-bus addresses to main memory addresses, the 
Q22-bus interface uses a fully associative, 16-entiy, Q22-bus map cache implemented in 
the CQBIC chip. 

The cached copy of the Q22-bus map register is used for the address translation process. 
If the required map entiy for a Q22-bus address (as determined by bits <21:9> of the 
Q22-bus address) is not in the map cache, then the Q22-bus interface uses the contents 
of the map base register to access main memory and retrieve the required entry. After 
obtaining the entry from main memory, the valid bit is checked. If it is set, the entry is 
stored in the cache and the Q22-bus cycle continues. 

Figure 7-3 shows the format of a Q22-bus map cache entry. Table 7-3 Usts the bit 
descriptions. 
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Figure 7-3 Q22-bu8 Map Cache Entry Format 
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Table 7-3 Q22-bus Map Cache Entry Bit Description 



Data Bit 



Name 



Description 



<33> 



CAMValid 



<32:20> 



<19:0> 



QBUS ADR 



Address bits 
A28toA9 



When a mapping register is selected by a Q22-bus address, the 
CAMVahd bit determines whether the cached copy of the mapping 
register for that address is valid. If the CAMValid bit is set, the 
mapping register is enabled, and addresses within that page can 
be mapped. 

If the CAMVahd bit is clear, the Q22-bus interface must read 
the map in local memory to determine if the mapping register is 
enabled. This bit is cleared 

• On power-up 

• By the negation of DCOK 

• By setting the Q22-bus map cache invalidate all (QMCIA) bit 
in the interprocessor communication register 

• On writes to IPR 55 (lORESET) 

• By a write to the Q22-bus map base register 

• By writing to the QMR being cached 

These bits contain the Q22-bus address bits <21:9> of the page 
that this entry maps. This is the content-addressable field of the 
16-entry cache for determining if the map register for a particular 
Q22-bus address is in the map cache. These bits are undefined on 
power-up. 

If a mapping register's CAMValid bit is set and the register is 
selected by a Q22-bus address, then these 20 bits are used as main 
memory address bits 28 to 9. Q22-bus address bits 8 to are used 
as local memory address bits 8 to 0. These bits are undefined on 
power-up. 



7.1.2 CP to Q22-bus Address Translation 

CP bus addresses within the Local Q22-bus I/O space, addresses 2000 0000 to 2000 
IFFFie, are translated into Q22-bus I/O space addresses by using bits <12:0> of the CP 
bus address as bits <12:0> of the Q22-bus address and asserting BBS7. Q22-bus address 
bits <21:13> are driven as Os. 

CP bus addresses within the local Q22-bus memory space, addresses 3000 0000 to 303F 
FFFF 16, are translated into Q22-bus memory space addresses by using bits <21:0> of the 
CP bus address as bits <21:0> of the Q22-bus address. 



7.1.3 Interprocessor Communications Facility 

The KA670 can only be configured as a Q22-bus arbiter. 

The KA670 interprocessor communication facility allows other processors on the Q22- 
bus to request program interrupts from the KA670 without using the Q22-bus interrupt 
request lines. It also controls external access to local memory (through the Q22-bus map). 
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7.1.3.1 Interprocessor Communication Register (IPCR) 

The interprocessor communication register at address 2000 lF40i6 is a 16-bit register 
that resides in the Q22-bus I/O page address space. This register can be accessed by 
any device that can become Q22-bus master (including the KA670 itselO. The IPCR 
is implemented in the CQBIC chip and is byte-accessible, which means a write byte 
instruction can write to either the low or high byte without affecting the other byte. 
Figure 7-4 shows the format of the IPCR register. Table 7—4 lists the bit descriptions. 
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Figure 7-4 Interprocessor Communication Register (iPCR) 



Table 7-4 interprocessor Communication Register Bits 



Data Bit Name 



Description 



<15> 



DMA QME 



<14> 



QMCIA 



<13:09> Unused 

<8> AUX HLT 



DMA Q22-bus address space memory error (read/write to clear). 
This bit indicates that an error occurred while a Q22-bus device 
was attempting to read main memory. The bit is set if DMA 
system error register bit DSER<4> (main memory error) is set, or 
the CP timer expires. The main memory error bit indicates that 
an uncorrectable error occurred when an external device (or CPU) 
was accessing the KA670 local memory. The CP timer expiring 
indicates that the memory controller did not respond when the 
Q22-bus interface initiated a DMA transfer. 

This bit is cleared by writing a 1 to it, on power-up, by the 
negation of DCOK, by writes to IPR 55 (lORESET), and whenever 
DSER<4> is cleared. 

Q22-bus map cache invalidate all (write-only). Writing a 1 to this 
bit clears the CAMValid bits in the cached copy of the map. This 
bit always reads as 0. Writing a has no effect. 

Read as Os. Must be written as Os. 

Auxiliary halt (read-only). When set, this bit has no effect on the 
operation of the onboard CPU. This bit is cleared on power-up, by 
the negation of DCOK, and by writes to IPR 5Si (lORESET). 



<7> 



Unused 



NOTE 

This bit should never be set, because the processor does not 

support auxiliary mode. 

Read as 0. Must be written as 0. 
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Table 7-4 (Cont.) Interprocessor Communication Register Bits 

Data Bit Name Description 

<6> DBI IE Doorbell interrupt enable. Read/write when the KA670 is Q22-bus 

master. Read-only when another device is Q22-bus master. When 
set, this bit enables interprocessor doorbell interrupt requests 
through IPCR<0>. This bit is cleared on power-up, the negation of 
DCOK, or writes to IPR 55 (lORESET). 

<5> LM EAE Local memory external access enable. Read/write when the KA670 

is Q22-bus master. Read-only when another device is Q22-bus 
master. When set, this bit enables external access to local memory 
(using the Q22-bus map). This bit is cleared on power-up or the 
negation of DCOK. 

<4:1> Unused Read as Os. Must be written as Os. 

<0> DBI RQ Doorbell interrupt request (read/write). If IPCR<6> (DEI IE) is 

set, setting this bit generates a doorbell interrupt request. If 
IPCR<6> is clear, setting this bit has no effect. Clearing this 
bit has no effect. DBI RQ is cleared when the CPU grants the 
doorbell interrupt request. DBI RQ is held clear whenever DBI IE 
is clear. This bit is cleared on power-up or the negation of DCOK. 



7.1.3.2 Interprocessor Doort}eli Interrupts 

If the interprocessor communication register DBIIE bit is set, any Q22-bus master can 
request an interprocessor doorbell interrupt by writing a 1 into IPCR bit <0>. 

The interrupt vector is 204i6, and the interrupt priority is 14i6- This IPL is the same 
as BR4 on the Q22-bus. The interprocessor doorbell is the third highest priority IPL 14 
device, directly after the console serial line unit and the programmable timers. 

NOTE 

Following an interprocessor doorbell interrupt, the KA670 CPU sets the IPL to 

14. The IPL is set to 17 for external Q22-bus BR4 interrupts. 

7.1.4 Q22-bus Interrupt Handling 

The KA670 responds to interrupt requests BR7 to BR4 with the standard Q22-bus 
interrupt acknowledge protocol (DIN followed by lAK). The console serial line unit, 
the programmable timers, and the interprocessor doorbell request will interrupt at IPL 
14. They have priority over all Q22-bus BR4 interrupt requests. After responding to any 
interrupt request BR7 to BR4, the CPU sets the processor priority to IPL 17. All BR7 to 
BR4 interrupt requests are disabled, imless software lowers the interrupt priority level. 

Interrupt requests from the KA670 interval timer are handled directly by the CPU. 
Interval timer interrupt requests have a hi^er priority than BR6 interrupt requests. 
After responding to an interval timer interrupt request, the CPU sets the processor 
priority to IPL 16. Thus, BR7 interrupt requests remain enabled. 

7.1.5 Configuring the Q22-bus Map 

The KA670 implements the Q22-bus map in an 8K longword (32-kilobyte) block of main 
memory. This map must be configured by the KA670 firmware during a processor 
initialization. The map is configured by writing the base address of the uppermost 
32-kilobyte block of good main memory into the Q22-bus map base register. The bas,e of 
this map must be located on a 32-kilobyte boundary. 
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NOTE 

This 32-kilobyte block of main memory must be protected by the system 
software. The only access to the map should be through local ly'O page addresses 
2008 8000 to 2008 FFFC ig- 

7.1.5.1 Q22-bus Map Base Address Register (QBMBR) 

The Q22-bus map base address register, address 2008 0010 le, controls the main memory 
location of the 32-kilobyte block of Q22-bus map registers. This read/write register is 
accessible by the CPU on a longword boundary only. Bits <31:29,14:0:> are unused and 
should be written as 0;they will return when read. Figure 7-5 shows the format of the 
register. 

A write to the map base register will flush the Q22-bus map cache by clearing the 
CAMValid bits in all entries. 

The contents of this register are imdefined on power-up or the negation of DCOK The 
contents are not affected by the assertion of BINIT on the Q22-bus. 



3 2 2 
1 9 8 



1 1 
5 4 



\mbz 


Map Base MBZ 1 



Figure 7-5 Q22-bus IMap Base Address Register (QBIWIBR) 
7.1.6 System Configuration Register (SCR) 

The system configuration register, address 2008 0000 is, contains the processor number 
that detennines the address of the IPCR register, a BHALT enable bit;, a power okay flag 
and an auxiliary flag. Figure 7-6 shows the format of the register. Table 7-5 lists the bit 
descriptions. 

The system configuration register (SCR) is longword, word, and byte-accessible. 
Programmable option fields are cleared on power-up or the negation of DCOK when 
SCR<7> is clear. 
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Figure 7-6 System Configuration Register (SCR) 
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Table 7-5 System Configuration Register Bits 



Data Bit Name 



<31:16> 
<15> 

<14> 



<13> 
<12> 



<11> 

<10> 



<9:8> 
<7> 



Unused 
POK 

BHALTEN 

Unused 

Page Prefetch 
Disable 



Unused 
AUX 



Unused 

Action on 

DCOK 

Negation 



<6:4> 


Unused 


<3:1> 


Reserved 


<0> 


Unused 



Description 



Read as 0. Must be written as 0. 

Power okay (read-only). Writes have no effect. This bit is set if the 
Q22-bus BPOK signal is asserted and clear if it is negated. This 
bit is cleared on power-up or the negation of DCOK. 

BHALT enable (read/write). This bit controls the effect of Q22-bu8 
BHALT signal on the CPU. When the bit is set, asserting the 022- 
bus BHALT signal halts the CPU and assert DSER<15>. When 
the bit is cleared, the Q22-bus BHALT signal has no effect. This 
bit is cleared on power-up or the negation of DCOK. 

Read as 0. Must be written as 0. 

Read/write. This bit should be set on the KA670. When set, this 
bit prohibits the CQBIC from prefetching the map when a Q22- 
bus transaction address reaches a page boundary. Stopping MAP 
prefetching buys back some needed CP bus bandwidth and lowers 
the CP devices latency. This bit is cleared on power-up or the 
negation of DCOK. 

Read as 0. Must be written as 0. 

Auxiliary (read-only). Writes have no effect. This bit defines the 
auxiliary and arbiter modes of operation of the KA670. When 
read as a 0, arbiter mode is selected. When read as a 1, auxiliary 
mode is selected. Because the KA670 can only be configured as an 
arbiter, this bit should always read as 0. 

Read as 0. Must be written as 0. 

Read/write. If DCOK is negated on the Q22-bus, clearing this bit 
causes the Q22-bus interface to assert SYSRESET. This action 
causes a hardware reset of the board; coptrol is passed to the 
resident firmware, using the hardware halt procedure with a halt 
code of 3. 

If DCOK is negated on the Q22-bus, setting this bit causes the 
Q22-bus interface to assert HALCYON. This action passes control 
to the resident firmware, using the hardware halt procedure with 
a halt code of 2. This bit is cleared on power-up or the negation of 
DCOK. 

Read as 0. Must be written as 0. 

Reserved for use by Digital. 

Read as 0. Mxist be written as 0. 



7.1.7 Error-Reporting Registers 

There are three registers associated with Q22-bus interface error reporting: 

• DMA system error register (DSER) 

• Q22-bus error address register (QBEAR) 

• DMA error address register (DBEAR) 

These registers are in the local VAX I/O address space. They can only be accessed by the 
local processor. 
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The DSER is implemented in the CQBIC chip. This register logs main memory errors 
on DMA transfers, Q22-bus parity errors, Q22-bus nonexistent memory errors, and a 
Q22-bus no grant condition. 

The QBEAR contains the address of the page in Q22-bus space that caused a parity error 
during an access by the local processor. 

The DBEAR contains the address of the page in local memory that caused a memory 
error during an access by an external device or the processor in a local-miss, global-hit 
transaction. Any access by the local processor that the Q22-bus interface maps into main 
memory will provide the procesor with (1) error status when the processor does a retry 
for a read local-miss, global hit, or (2) an interrupt in the case of a local-miss global-hit 
write. 



7.1.7.1 DMA System Error Register (DSER) 

The DSER, address 2008 0004i6, is a longword, word, or byte-accessible register available 
to the local processor. The bits in this read/write register are cleared to on power-up, 
the negation of DCOK or writes to IPR 55 (lORESET). All bits are set to 1, to record the 
occurrence of an event. They are cleared by writing a 1. Writing Os has no effect. 

Figure 7-7 shows the format of the register. Table 7-6 lists the bit descriptions. 
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Figure 7-7 DMA System Error Register (DSER) 



Tabie 7-6 DMA System Error Register Bits 



Data Bit Name 



Description 



<31:16> Unused 

<15> Q22-BUS BHALT detected 



<14> Q22-bus DCOK negation 

detected 



Read as 0. Must be written as 0. 

Read/write to clear. This bit is set when the Q22- 
bus interface detects that the Q2:2-bus BHALT line 
was asserted and SCR<14> (BHALT ENABLE) is 
set. The bit is cleared by writing a 1, writes to IPR 
55 (lORESET), power-up, or the negation of DCOK. 

Read/write to clear. This bit is se* when the Q22- 
bus interface detects the negation of DCOK on the 
Q22-bus and SCR<7> (action on DCOK negation) is 
set. This bit is cleared by writing a 1, writes to IPR 
55 (lORESET), power-up, or the negation of DCOK. 
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Table 7-6 (Com.) DMA System Error Register Bits 



Data Bit Name 



Description 



<13:8> 
<7> 



Unused 

MASTER DMA NXM 



<6> 
<5> 



Unused 

Q22-bus parity error 



<4> 



Main memory error 



<3> 



Lost error 



<2> 



No grant timeout 



<1:0> 



Unused 



Read as 0. Must be written as 0. 

ReadAVrite to clear. This bit is set when the CPU 
performs a demand Q22-bus read cycle or write cycle 
that does not reply after 10 jis. During interrupt 
acknowledge cycles or request read cycles, this bit 
is not set. The bit is cleared by writing a 1, writes 
to IPR 55 (lORESET), power-up, or the negation of 
DCOK. 

Read as 0. Must be written as 0. 

Read/Write to clear. This bit is set when the CPU 
performs a Q22-bus demand read cycle that returns 
a parity eiTor. This bit is not set during interrupt 
acknowledge cycles, or request read cycles. The 
bit is cleared by writing a 1, writes to IPR 55 
(lORESET), power-up, or the negation of DCOK. 

Read/write to clear. This bit is set if an external 
Q22-bus device or local-miss, global-hit receives 
a memory error while reading local memory. The 
IPCR<15> reports the memory error to the external 
Q22-bus device. This bit is cleared by writing a 
1, writes to IPR 55 (lORESET), power-up, or the 
negation of DCOK. 

Read/write to clear. This bit indicates that an 
error address was lost because DSER<7,5,4,0> was 
previously set and a subsequent error of either 
type occurred that normally would have captured 
an address and set either I)SER<7,5,4,0> flag. 
The bit is cleared by writing a 1, writes to IPR 55 
(lORESET), power-up, or the negation of DCOK. 

Read/write to clear. This bit is set if the Q22-bus 
does not return a bus grant within 10 ms of the 
bus request from a CPU demand read cycle or 
write cycle. This bit is not set during interrupt 
acknowledge or request read cycles . The bit is 
cleared by writing a 1, writes to IPR 55 (lORESET), 
power-up, or the negation of DCOK. 

Read as 0. Must be written as 0, 



7.1.7.2 Q22-bus Error Address Register (QBEAR) 

The Q22-bus error address register, address 2008 0008 is, is a read-only, longword- 
accessible register implemented in the CQBIC chip. Its contents are valid only if 
DSER<5> (Q22-bus parity error) is set, or if DSER<7> (master DMA NXM) is set. 
Figure 7-8 shows the format of the register. 

Reading this register when DSER<5> and DSER<7> are clear will return undefined 
results. Additional Q22-bus parity errors that could have set DSER<5> or Q22-bus 
timeout errors that could have caused DSER<7> to set, will cause DSER<3> to set. 

The QBEAR contains the address of the page in Q22-bus space that caused 

• A parity error during an access by the onboard CPU, which set DSER<5> 

• A master timeout that set DSER<7> 
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Q22-bus address bits <21:9> are loaded into QBEAR bits <12:0>. QBEAR bits <31:13> 
always read as Os. 



1 1 

32 



MBZ 


Q22-bus 

Address Bits<21 :9> 



Figure 7-8 Q22-bus Error Address Register (QBEAR) 

NOTE 

T^is is a read-ozdy register. Attempts to write wUl generate a hard error (IPL 

7.1.7.3 DMA Error Address Register (DBEAR) 

The DMA error address register, address 2008 OOOC le, is a read-only, longword- 
accessible register implemented in the CQBIC chip. The register contains valid 
information only when DSER<4> (main memory error) is set. Reading this register 
when DSER<4> is clear will return undefined data. Figure 7-9 shows the format of the 
register. 

The DBEAR contains the map-translated address of the page in local memory that caused 
a memory error or nonexistent memory error during an access by: 

• An external device 

• The Q22-bus interface for the CPU, during a local-miss global-hit transaction or 
Q22-bus map access 

The contents of this register are latched when DSER<4> is set. Additional main memory 
^"I™ **'' "<^"®*»stent memory errors have no effect on the DBEAR until software clears 
DSER<4> . 

Mapped Q22-bus address bits <28:9> are loaded into DBEAR bits <19:0>. DBEAR bits 
<31:20> always read as Os. 
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Figure 7-9 DIMA Error Address Register (DBEAR) 
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7.1.8 Error Handling 
Parity 

The Q22-bus interface does not generate or check CP parity. 

The Q22-bus interface monitors Q22-bus signals BDAL<17:16> while reading information 
over the Q22-bus, so that parity errors detected by the device being read from are 
recognized. 

If a parity error is detected by another Q22-bus device on a CPU demand read reference 
to Q22-bus memory or I/O space, then DSER<5> is set, the address of the Q22-bus page 
being accessed is captured in QBEAR<12:0>, and a machine check abort is initiated. 

If a parity error is detected by another Q22-bus device on a prefetch request read by the 
CPU, the prefetch is aborted, DSER<5> is set, and the address of the Q22-bus page being 
accessed is captured in QBEAR<12:0>. However, no machine check is generated. 

Memory and I/O Space 

The Q22-bus interface checks all CPU references to Q22-bus memory and I/O spaces to 
ensure only masked and unmasked longword accesses are attempted. Any other type of 
reference initiates a machine check abort. 

Timers 

The Q22-bus interface maintains several timers to prevent incomplete accesses from 
hanging the system indefinitely. They include a 10}js nonexistent memory timer 
for accesses to the Q22-bus memory and I/O spaces, a 10p.s NO SACK timer for 
acknowledgment of Q22-bus DMA grants, and a 10 ms NO GRANT timer for acquiring 
the Q22-bus. 

Nonexistent Memory 

If there is a nonexistent memory (NXM) error (10 jis timeout) while accessing the Q22- 
bus on a demand read reference, bit DSER<7> is set, the address of the Q22-bus page 
being accessed is captured in QBEAR<12:0>, and a machine check abort is initiated. 

If there is a NXM error on a prefetch read or an interrupt acknowledge vector read, then 
the prefetch or interrupt acknowledge reference is aborted. However, no information is 
captured and no machine check occurs. 

If there is a NXM error on a masked write reference, then DSER<7> is set, the address 
of the Q22-bus page being accessed is captured in QBEAR<12:0>, and an interrupt is 
generated at IPL ID through vector 60i6. 

Bus Grants 

If the Q22-bus interface does not receive an acknowledgment within 10 |xs after it has 
granted the Q22-bus, the grant is withdrawn, no errors are reported, and the Q22-bus 
interface waits 500 ns to clear the Q22-bus grant daisy chain before beginning arbitration 
again. 

If the Q22-bus interface tries and fails to obtain Q22-bus mastership within 10 ms on a 
CPU demand read reference, DSER<2> is set and a machine check abort is initiated. 
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Power Failures 

The Q22-bus interface also monitors the backplane BPOK signal to detect power failures. 
If BPOK is negated on the Q22-bus, a power f lil trap is generated, and the CPU traps 
through vector OCie- The state of the Q22-bus BPOK signal can be read from SCR<15>. 
The Q22-bus interface continues to operate after generating the power-fail trap, until 
DCOK is negated. 

7.2 KA670 Network Interface 

The KA670 includes a network interface , implemented through the second-generation 
Ethernet controller chip (SGEC). When used in conjunction with the H3604 cover 
panel, this interface allows the KA670 to be connected to either a ThinWire or standard 
Ethernet network. The interface supports the Ethernet data link layer as specified in the 
VAX Architecture Reference Manual. The SGEC also supports CP bus parity protection. 

7.2.1 Ethernet Overview 

Ethernet is a serial bus that can support up to 1,024 nodes, with a maximum separation 
of 2.8 kilometers (1.7 miles). Data is passed over the Ethernet in Manchester-encoded 
format at a rate of 10 million bits/second in variable-length packets. Each packet has the 
format shown in Figure 7-10. 
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Figure 7-10 Ethernet Packet Format 

The minimum size of a packet is 64 bytes, which implies a minimum data length of 46 
bytes. Packets shorter than this are called runt packets and are treated as erroneous 
when received by the network controller. 

All nodes on the Ethernet have equal priority. The technique used to control access to the 
bus is called carrier sense, multiple access, with collision detection (CSMA/CD). 

• To access the bus, devices must first wait for the bus to clear (no earner sensed). 
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• When the bus is clear, all devices that want to access the bus have equal priority 
(multiaccess), so they all attempt to transmit. 

• After starting transmission, devices must monitor the bus for collisions (collision 
detection). If no collision is detected, the device may continue with transmission. If a 
collision is detected, then the device waits for a random amount of time and repeats 
the access sequence. 

Ethernet allows point-to-point communication between two devices, as well as 
simultaneous communication between multiple devices. To support these two modes 
of communication, there are two types of network addresses, physical and multicast. 
These two types of addresses are both 48 bits (6 bytes) long. 

• Physical address: The unique address associated with a particular station on the 
Ethernet. This address should be distinct from the physical address of any other 
station on any other Ethernet. 

• Multicast address: A multidestination address associated with one or more stations 
on a given Ethernet, sometimes called a logical address. There are two kinds of 
multicast addresses: 

- Multicast-group address: 

- An address associated by higher-level convention with a group of logically related 
stations. 

- Broadcast address: A predefined multicast address that denotes the set of all 
stations on the Ethernet. 

Bit (the least significant bit of the first byte) of an address denotes the type: it is 
for physical addresses, and 1 for multicast addresses. In either case, the remaining 47 
bits form the address value. A value of forty-eight Is is always treated as the broadcast 
address. 

The hardware address of the KA670 module is determined at the time of manufacture. 
The address is stored in the network interface station address (NISA) ROM. Because 
every device that connects to an Ethernet network must have a unique physical address, 
the bit pattern blasted into the NISA ROM must be unique for each KA670 . The 
multicast addresses that the KA670 will respond to are determined by the multicast 
address filter mask in the network interface initialization block. 

7.2.2 Nl Station Address ROM (NISA ROM) 

The network interface includes a byte-wide, 32-byte, socketed ROM called the network 
interface station address ROM. One byte of this ROM appears in the second byte of 
each of 32 consecutive longwords in the address range 2008 4000 to 2008 407Ci6. Bytes 
one, three, and four of each longword are defined in the boot and diagnostic register 
(Section 6.1). The second byte of the first six longwords contain the 48-bit network 
physical address (NPA) of the KA670 . The low-order byte in the remaining 26 longwords 
is for testing. This address range is read-only. Writes to this address range will complete 
with no effect. 
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7.3 Programming the Ethernet Controller Chip (SGEC) 

The operation of the second-generation Ethernet controller chip (SGEC) is controlled 
by a program in host memory called the port driver. The SGEC and the port driver 
communicate through two data structures: 

• network interface command and status registers (NICSRs) located in the SGEC and 
mapped in the host I/O address space 

• descriptor lists and data buffers, collectively called the host communication area, in 
host memory. 

The NICSRs are used for initialization, global pointers, commands, and global error 
reporting. The host memory resident structures handle the actions and statuses related 
to bufFer management. 

7.3.1 Programming Overview 

The SGEC can be viewed as two independent, concurrently executing processes - 
reception and transmission. After the SGEC completes its initialization sequence, these 
two processes alternate between three states: 

• Stopped 

• Running 

• Suspended 

State transitions occur as a result of port driver commands writing to a NICSR, or 
various external events. Some of the port driver commands require the referenced process 
to be in a specific state. 

Here is a summary of a simple programming sequence of the chip: 

1. After power-up or reset, verify the self-test completed successfully. 

2. Write NICSRs to set major parameters such as the system base register, interrupt 
vector, address filtering mode, and so on. 

3. Create the transmit and receive lists in memory, and write the NICSRs to identify 
them to the SGEC. 

4. Place a setup frame in the transmit list, to load the internal reception address- 
filtering table. 

5. Start the reception and transmission processes, placing them in the running state. 

6. Wait for SGEC interrupts. NICSRS contains all the global interrupt status bits. 

7. If either the reception or transmission process enters the suspended state, correct the 
cause of the suspension: 

• Issue a TX POLL DEMAND command to return the transmission process to the 
nmning state. 

• If desired, issue an RX POLL DEMAND command to return the reception process 
to the running state. 

If the RX POLL DEMAND is not issued, the reception process returns to the 
running state when the SGEC receives the next recognized incoming frame. 

The following sections contain detailed programming and state transitions information. 
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7.3.2 Command and Status Registers 

The SGEC contains 16 command and status registers that the host can acces. 

7.3.3 Host Access to NICSRs 

The SGEC's NICSRs are located in VAX I/O address space. 

The NICSRs must be longword aligned and can only be accessed using longword 
instructions. The address of NICSRx is the base address plus 4x bytes. For example, 
if the base address is 2000 8000, then the address of NICSR2 is 2000 8008. In the 
following paragraphs, NICSRs bits are specified with several access modes. Table 7-7 
lists the different access modes for bits. 

Table 7-7 Bit Access Modes 

Bit Marked Meaning 



Reserved for future expansion — ignored on write, read as 0. 

1 Reserved for future expansion — ignored on write, read as 1. 
R Read-only. Ignored on write. 

R/W Read/write. 

W Write-only. Unpredictable on read. 

R/Wl Read, or clear by writing a 1. Writing with a has no effect. 



In order to save chip space, but not tie up the host bus for extended periods of time, the 
16 NICSRs are divided into two groups: 

1. Physical NICSRs— to 7, 15. 

2. Virtual NICSRs— 8 to 14. 

The group that a NICSR belongs to determines the way the host accesses that NICSR. 

7.3.3.1 Physical NICSRs 

These registers are physically present in the chip. The host accesses these NICSRs by 
a single instruction — for example, MOVL. There is no host-perceivable delay, and the 
instruction completes immediately. Most commonly used SGEC features are contained in 
the physical NICSRs. 

7.3.3.2 Virtual NICSRs 

These registers are not physically present in the SGEC and are incarnated by the on-chip 
processor. Accesses to SGEC functions implied by these registers may take up to 20 |xs. 
lb avoid tieing up the host bus, virtual NICSR access requires several steps by the host. 

The NICSR5<DN> signal is used to sjnichronize access to the virtual NICSRs. After 
accessing the first virtual NICSR access, the SGEC deasserts NICSR5<DN> until it 
completes the action. 

NOTE 

Accessing virtual NICSRs without polling first on the NICSR6<DN> reassertion 

will cause unpredictable results. 
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7.3.3.2.1 Virtual NICSR Write 

To write to a virtual NICSR, the host takes the following actions: 

1. Issues a write NICSR instruction. The instruction completes immediately, but the 
data is not yet copied by the SGEC. 

2. Waits for NICSR5<DN>. The host cannot access any SGEC virtual NICSR before 
NICSR5<DN> asserts. 

7.3.3.2.2 Virtual NICSR Read 

To read a vdrtual NICSR, the host takes the following actions: 

1. Issues a read NICSR instruction. The instruction completes immediately, but no valid 
data is sent to the host. 

2. Waits for NICSR5<DN>. The host cannot access any SGEC virtual NICSR before 
NICSR5<DN> asserts. 

3. Reissues a read NICSR instruction to the same NICSR as in step 1. The host receives 
valid data. 

7.3.4 Vector Address, IPL, Sync/Asynch (NICSRO) 

During host writes to NICSRs, the SGEC may generate an interrupt on parity errors. For 
this reason, the NICSRO register must be the first one written by the host. Figure 7-11 
shows the format of the register. Table 7-8 lists the bit descriptions. 

Parity Errors 

A parity error during a NICSRO host write may cause a host system crash, due to an 
erroneous interrupt vector. To prevent such an error, NICSRO must be written as follows 
while the SGEC's assigned IPL is disabled: 

1. Write NICSRO. 

2. Read NICSRO. 

3. Compare the value read to the value written. If the values do not match, return to 
step 1. 

4. Read NICSRS and examine NICSR5<ME> for a pending parity interrupt. If an 
interrupt is pending, write NICSR5 to clear it. 
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IV = Interrupt Vector 
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SA 



I/O Address: 2000 8000 
Longword Read/Write Access 



Figure 7-11 Vector Address, IPL, Sync/Asynch (NICSRO) 
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Table 7-8 NICSRO Bits 



Bit 



Name 



Access 



Description 



<31:30> 



IP 



RW 



Interrupt Priority. These bits indicate the 
VAX interrupt priority level that the SGEC 
will respond to, as follows: 



<29> 



SA 



RW 



<15:00> 



rv 



RW 



IP 



IPL 



16 



00 


14 


01 


15 


10 


16 


11 


17 



Although the SGEC has only one interrupt 
request pin, that pin might be wired to any 
of the four IRQ pins on the host. The value 
in IP should correspond to the IPL level 
that the pin is wired to. 

Synchronous/asynchronous. This bit 
determines the SGEC's operating mode 
when it is the bus master. When set, the 
SGEC operates as a synchronous device. 
When clear, the SGEC operates as an 
asynchronous device. 

Interrupt vector. During an interrupt 
acknowledge cycle for an SGEC interrupt, 
these bits contain the value that the SGEC 
will drive on the host bus CDAL<31:0> 
pins. (CDAL pins <1:0> and <31:16> are 
set to 0.) Bits <1:0> are ignored when 
NICSRO is written, and set to 1 when read. 



NICSRO Access 

Value after reset 
Read access rules 
Write access rules 



lFFF0003i6 

None, 

The SGEC's assigned IPL must be disabled. 



7.3.5 Transmit Polling Demand {NICSR1) 

The polling demand NICSR (NICSRl) is used by the port driver to tell the SGEC that it 
put a packet on the transmit. Figure 7-12 shows the format of the register. Table 7-9 
lists the bit descriptions. 
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Must Be One 



f/0 Address : 2000 8004 
Longword Write-Only Access 



*— PD 



Figure 7-12 Transmit Polling Demand (NICSR1) 
Table 7-9 NiCSRI Bits 



Bit 



Name 



Access 



Description 



<31:01> 



<00> 



MBZ 
PD 



W 



Must be one. This field is reserved for 
future expansion. Write as 1. 

Tx polling demand. Checks the transmit 
list for frames to be transmitted. 



The PD value is meaningless. 



NiCSRI Access 

Value after reset 
Read access rules 
Write access rules 



Not applicable. 

None. 

IVansmission process suspended. 



7.3.6 Receive Polling Demand (NICSR2) 

The receive polling demand NICSR (NICSR2) is used by the port driver to tell the SGEC 
that it put a packet on the receive list. Figure 7-13 shows the format of the register. 
Table 7-10 lists the bit descriptions. 
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Must Be One 



I/O Address: 2000 8008 



•— PD 



Figure 7-13 NICSR2 Format 
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Table 7-10 NICSR2BKS 



Bit 



<31:01> 



00 



Name 



Access 



MBZ 



PD 



W 



Description 



Must be 1. This field is reserved for future 
expansion. Write as 1. 

Rx polling demand. Checks the receive list 
for receive descriptors to be acquired. 

The PD value is meaningless. 



NICSR2 Access 

Value after reset 
Read access rules 
Write access rules 



Not applicable. 

None. 

Receive process suspended. 



7.3.7 Descriptor List Addresses (NICSR3, NICSR4) 

The two descriptor list address registers are identical in function. One is for the transmit 
buffer descriptors, and one is for the receive buffer descriptors. In both cases, the 
registers serve to point the SGEC to the start of the appropriate buffer descriptor list. 

The descriptor lists reside in VAX physical memory space and must be longword 

aligned. 

For best performance, it is recommended that the descriptor lists be octaword aHgned. 

TRANSMIT LIST , . . ^ . . * * 

If the TVansmit descriptor list is built as a ring (the chain descriptor points at 
the first descriptor of the list), the ring must contain at least two descriptors in 
addition to the chain descriptor. 

Initially, these registers must be written before the respective start command is given 
(Section 7.3.9). Otherwise, the respective process will remain in the stopped state. 
New list addresses are only acceptable while the respective process is in the stopped 
or suspended states. Addresses written while the respective process is in the running 
state, are ignored and discarded. 

If the host tries to read any of these registers before ever writing to them, the SGEC 
responds with unpredictable values. Figure 7-14 shows the format of the registers. 
Table 7-11 lists the bit descriptions. 
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3 3 
1 



2 1 



MBZ 



Start of Receive List - RBA 



MBZi NICSR3 



I/O Address: 2000 800C 

Longword Read/Write Access 



3 3 
1 



2 1 



MBZ 



Start of Transmit List - TBA 



MBZ N1CSR4 



I/O Address: 2000 8010 

Longword Read/Write Access 



Figure 7-14 Descriptor List Addresses Format 
Table 7-11 Descriptor List Address Bits 



Bit 



Name 



Access 



Description 



<31:30> 
<29:00> 



MBZ 

RBA or TBA 



aw 



Must be 1. Ignored on vnrites. Read as 0. 

Address of the start of the receive list 
(NICSR3) or transmit list (NICSR4). This 
is a 30-bit VAX physical address. 



NOTE 

The descriptor lists must be longword-aligned. 



NiCSRS Access 

Value after reset: 
Read access rules: 
Write access rules: 

NICSR4 Access 

Value after reset 
Read access rules 
Write access rules 



Unpredictable. 

None. 

Receive process stopped or suspended. 



Unpredictable. 
None. 



IVansmit process stopped or suspended. 

After NICSR3 or NICSR4 is written, the new address is readable from the written 
NICSR. However, if the SGEC status did not match the related write access rules, the 
new address does not take effect and the written information is lost, even if the SGEC 
matches the right condition later. 
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7.3.8 Status Register (NICSR5) 

This register contains all the status bits the SGEC reports to the host. Figure 7-15 
shows format of the register format. Table 7-12 lists the bit descriptions. 
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Ji ii 



SS 



TS 



RS 



MBO 



OM 



MUST BE ONE 



IS 

Tl 

Rl 

RU 

ME 

RW 

TW 

BO 

DN 

SF 

ID 



I/O Address: 2000 8014 
Longword Access with: 

Bits <31:16> Read-Only 
Bits <16:0> Read/Write 1 to Clear 



Figure 7-15 NICSR5 Format 
Table 7-12 NICSRSBIts 



Bit 



Name 



Access 



<31> 



ID 



R 



<30> 



SF 



R 



Description 



Initialization done. When set, this bit 
indicates the SGEC has completed the 
initiahzation (reset and self-test) sequences 
and is ready for further commands. When 
clear, this bit indicates the SGEC is 
performing the initialization sequence 
and ignoring all commands. After the 
initialization sequence completes, the 
transmission and reception processes are in 
the stopped state. 

Self-test failed. When set, this bit indicates 
the SGEC self-test has failed. The self-test 
completion code bits indicate the failure 
type. 
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Table 7-1 2 (Cont.) NICSR5 Bits 



Bit 



Name 



Access 



<29:26> 



SS 



R 



Description 



Self-test status. This field provides the 
self-test completion code, according to the 
following table, the code is only valid if SP 
is set. 



<25:24> 



TS 



R 



Value 



Meaning 



0001 ROM erroir 

0010 RAM erroir 

0011 Address filter RAM error 

0100 Transmit FIFO error 

0101 Receive FIFO error 
0110 Self_test liaopback error 

The self-test takes 25 mis to complete after 
the hardware or software reset. 

Transmission process state. This field 
indicates the current stsite of the 
Transmission process, as follows: 



<23:22> 



RS 



Value 



Meaning 



00 


Stopped 


01 


Running 


10 


Suspended 



Section 7.3.24 explains the transmission 
process operation and state transitions. 

Reception process state. This field indicates 
the current state of the IReception process, 
as follows: 



Value 



Meaning 



00 


Stopped 


01 


Running 


10 


Suspended 



Section 7.3.23 explains the reception 
process operation and state transitions. 
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Table 7-12 (Cont.) NICSR5 Bits 



Bit 



Name 



Access 



<18:17> 



OM 



Description 



Operating mode. These bits indicate the 
current SGEC operating mode, as follows: 



Value 



Meaning 



00 
01 



10 



11 



Normal operating mode. 

Internal loopback — Indicates 
the SGEC is disengaged 
from the Ethernet wire. 
Frames from the transmit 
list are looped back to the 
receive list, subject to address 
filtering. Section 7.3.25 
explains this mode of 
operation. 

External Loopback — 
Indicates the SGEC is 
working in full-duplex mode. 
Frames from the transmit 
list are transmitted on the 
Ethernet wire and looped 
back to the receive list, 
subject to address filtering. 
Section 7.3.25 explains this 
mode of operation. 

Reserved for diagnostics. 



<16> 

<15:8> 

<7> 

<6> 



DN 

MBO 
BO 

TW 



R 



RWl 



R/Wl 



Done. When set, this bit indicates the 
SGEC has completed a requested virtual 
NICSR access. After a reset, this bit is set. 

Must be 1. This field is reserved. Read as 
1. Writes are ignored. 

Boot message. When set, this bit indicates 
that the SGEC has detected a boot_message 
on the serial line and has set the external 
pin BOOT_L. 

Transmit watchdog timer interrupt. 
When set, this bit indicates the transmit 
watchdog timer has timed out, indicating 
the SGEC transmitter was babbling. The 
transmission process is aborted and placed 
in the stopped state. This is also reported 
into the transmission descriptor status 
TDES0<TO> flag. 
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Table 7-12 (Com.) NICSR5 Bits 



Bit 



Name 



Access 



<5> 



RW 



R/Wl 



<4> 



ME 



R/Wl 



<3> 



RU 



RWl 



<2> 



RI 



R/Wl 



Description 



Receive watchdog timer interrupt. When 
set, this bit indicates the receive watchdog 
timer has timed out, indicating that some 
other node is babbling on the network. 
Current frame reception is aborted and 
RDESO<LE> and RDESO<LS> are set. Bit 
NICSR5<RI> is also set. The reception 
process remains in the running state. 

Memory error. This bit isset when any of 
the followings occur: 

• SGEC is the CP bus master, and the 
ERR_L pin is asserted by external 
logic (generally inclicating a memory 
problem). 

• A parity error was detected on a host to 
SGEC NICSR write or SGEC read from 
memory. 

When a memory error is set, the reception 
and transmission processes are aborted 
and placed in the stopped state. 

NOTE 

At this point, the poirt driver must 

issue a reset command and rewrite all 

NICSRs. 

Receive buffer unavaiUible. When set, this 
bit indicates that the next descriptor on 
the receive list is owned by the host and 
could not be acquired by the SGEC. The 
reception process is placed in the suspended 
state. Section 7.3.23 explains the reception 
process state transitions. 

After being set by the I3GEC, this bit is 
not set again until the SGEC encounters 
a descriptor it can not acquire. To 
resume processing receive descriptors, 
the host must flip the ownership bit of 
the descriptor and can issue the Rx poll 
demand command. If no Rx poll demand 
is issued, the reception process resumes 
when the next recognized incoming frame is 
received. 

Receive interrupt. When set, this bit 
indicates that a frame has been placed 
on the receive list. Frame-specific status 
information was posted in the descriptor. 
The reception process remains in the 
running state. 
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Table 7-12 (Com.) NICSR5 Bits 



Bit 



Name 



Access 



Description 



<1> 



TI 



<0> 



IS 



RAVI Transmit interrupt. When set, this bit 

indicates one of the following: 

« Either all the frames in the transmit 
list have been transmitted (next 
descriptor owned by the host), or a 
frame transmission was aborted due to 
a locally induced error. The port driver 
must scan down the list of descriptors 
to determine the exact cause. 

The transmission process is placed in the 
suspended state. Section 7.3.24 explains 
the transmission process state transitions. 
Tb resume processing transmit descriptors, 
the port driver must issue the TX poll 
demand command. 

• A frame transmission completed, and 
TDES1<IC> was set. The transmission 
process remains in the running state, 
unless the next descriptor is owned 
by the host or the frame transmission 
aborted due to an error. In the latter 
cases, the transmission process is 
placed in the suspended state. 

R/Wl Interrupt summary. The logical OR of 

NICSR5 bits 1 to 6. 



NICSR5 Access 

Value after reset 
Read access rules 
Write access rules 



0039FP00i6. 

None. 

NIC8R5<07:01> bits cleared by 1, others bits not writeable. 



7.3.8.1 NICSR5 Status Report 

The NICSR5 status register is divided into two words: 

• High word— Contains the global status of the SGEC (as the initialization status), the 
DMA and operation mode, and the receive and transmit process states. 

• Low word— Contains the status related to the receive and transmit frames. 

Any change of the NICSR5 bits <ID>, <SF>, <0M>, or <DN> is always the result of a 
host command. These changes are reported without an interrupt. 

Any process state change initiated by a host command NICSR6<ST> or NICSR6<SR>, 
is reported without an interrupt. 

In the two cases above, the driver must poll on NICSR5 to get acknowledgement of its 
command— for example, polling on <ID, SF> after a reset, or polling on <TS> after a 
START_TX command. 

Any process state change initiated by the SGEC activity is immediately followed by at 
least one of the NICSR5<6:1> interrupts and the interrupt_summary NICSR5<IS>. 
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The SGEC 16-bit internal processor updates the 32-bit NICSR5 register in two phases: 

• The high word is modified first. 

• Then the low word is written, which generates an interrupt to the host. 

In this case, the driver must scan the NICSR5 low word to get the interrupt status, then 
scan the NICSR high word to get the related process state. For example, <TI> interrupt 
with <TS> = SUSPENDED reports an end of transmission due to a Tx descriptor 
unavailable. 

If the host polls on the process state change, it may detect a change vdthout interrupt, 
due to the small time window separating the NICSR5 high word and low word updates. 

Maximum time window: 4 x Tbycles of the host clock 

7.3.9 Command and Mode Register (NICSR6) 

This register serves to establish operating modes and issue port driver commands. 
Figure 7-16 shows the format of the register. Table 7-14 lists the bit descriptions. 
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Figure 7-16 NICSR6 Format 
Table 7-1 4 NiCSR6Bits 



Bit 



Name 



Access 



Description 



<31> 



<30> 



<29> 



RE 



IE 



R/W 



RW 



Reset command. When this bit is set, the 
SGEC will abort all processes and start 
the reset sequence. After completing the 
reset and self-test sequence, the SGEC sets 
bit NICSR5<ID>. Clesiring this bit has no 
effect. 

NOTE 

The NICSR6<RE> vidue is 
unpredictable on reads after a 
hardware reset. 

Interrupt enable mode. When this bit is set, 
setting NICSR5 bits 1 to 6 will generate an 
interrupt. 

Reserved. 
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Description 



Burst limit mode. This field specifies the 
maximum number of longwords to be 
transferred in a single DMA burst on the 
host bus. 

When NICSR6<SE> is cleared, permissible 
values are 1,2,4, and 8. When SE is set, the 
only permissible values are 1 and 4. Values 
of 2 or 8 are forced to 1 or 4, respectively. 

After initialization, the burst limit is set to 
1. 

Tliis field is reserved. Writes are ignored. 
Read as 1. 

Boot message enable mode. When 
set, this bit enables the boot message 
recognition. When the SGEC recognizes an 
incoming boot message on the serial line, 
NICSR5<B0> is set and the external pin 
BOOT_L is asserted for a duration of 6 x 
Tcycles of the host clock. 

Single cycle enable mode. When this bit 
is set, the SGEC transfers only a single 
longword or an octaword in a single DMA 
burst on the host bus. 

Must be one. This field is reserved. Writes 
are ignored. Read as 1. 



Table 7-14 (Com.) NICSR6 Bits 



Bit 



Name 



Access 



<28:25> 



BL 



RW 



<24:21> 
<20> 



MBO 

BE 



R/W 



<19> 



SE 



R/W 



<18:12> 



MBO 
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Table 7-14 (Com.) NICSR6 Bits 



Bit 



Name 



Access 



<11> 



ST 



RW 



Description 



Start/stop transmission command. When 
this bit is set, the transmission process is 
placed in the running state. The SGEC 
checks the transmit hst at the current 
position for a frame to transmit — the 
address set by NICSR4 or the position 
retained when the transmission process 
was previously stopped,. If it does not find a 
frame to transmit, the Transmission process 
enters the suspended state. 

The start transmission command is honored 
only when the transmission process is 
in the stopped state. The first time this 
command is issued, the NICSR4 must 
already been written to. Otherwise, 
the transmission process remains in the 
stopped state. 

When this bit is cleared, the transmission 
process is placed in thet stopped state after 
completing transmission of the current 
frame. Ihe next descriiptor position in 
the transmit list is saved and becomes 
the current position af :er transmission is 
restarted. 

The stop transmission command is honored 
only when the transmission process is in 
the running or suspended states. 

See Section 7.3.24 for more information. 



Table 7-1 4 (Com.) NICSR6 Bits 



Bit 



Name 



Access 



<10> 



SR 



RW 
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Description 



Start/stop reception command. When this 
bit is set, the reception process is placed 
in the running state, the SGEC tires to 
acquire a descriptor from the receive list 
and process incoming frames. Descriptor 
acquisition is attempted from the current 
position in the list — the address set by 
NICSR3 or the position retained when the 
reception process was previously stopped. If 
no descriptor can be acquired, the Reception 
process enters the suspended state. 

The start reception command is honored 
only when the reception process is in the 
stopped state. The first time this command 
is issued, NICSR3 must already have been 
written to. Otherwise, the reception process 
remains in the stopped state. 

When this bit is cleared, the reception 
process is placed in the stopped state 
after completing reception of the cun-ent 
frame. The next descriptor position in 
the receive list is saved and becomes the 
current position after reception is restarted. 
The stop reception command is honored 
only when the reception process is in the 
running or suspended states. 

See Section 7.3.23 for more information. 
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Table 7-14 (Com.) NiCSR6 Bits 



Bit 



Name 



Access 



Description 



<9:8> 



OM 



aw 



Operating mode. These bits determine the 
SGEC's main operating mode. 



Value 



Meaning 



00 
01 



10 



11 



Normal ojjerating mode. 

Internal loopback — The 
SGEC will loop back buffers 
from the transmit list. The 
data is paissed from the 
transmit logic back to the 
receive logic. The receive 
logic treats the looped frame 
as it would any other frame, 
subjecting it to the address 
filtering and validity check 
process. 

External loopback — ^The 
SGEC transmits normally 
and enables its receive 
logic to receive its own 
transmissions. The receive 
logic treats the looped frame 
as it would any other frame, 
subjecting it to the address 
filtering and validity check 
process. 

Reserved for diagnostics. 



<7> 



DC 



RW 



<6> 



FC 



WW 



Disable data chaining mode — When this 
bit is set, no data chaining occurs in 
receptions. Frames that are longer than 
the current receive buffer are truncated. 
RDESO<FS,LS> will always be set. The 
frame length returned in RDESO<FL> will 
be the true length of the nontruncated 
frame, while RDES0<BO> will indicate that 
the frame has been truncated due to buffer 
overflow. 

When this bit is clear, frames that are 
too long for the current receive buffer are 
transferred to the next buffer(s) in the 
receive list. 

Force collision mode — This bit allows the 
collision logic to be tesbsd. The chip must 
be in internal loopback mode for FC to be 
valid. If this bit is set, a collision is forced 
during the next transmission attempt. 
The collision results in 16 transmission 
attempts, with excessive collision reported 
in the transmit descriptor. 
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Table 7-14 (Com.) NiCSRG Bits 



Bit 



Name 



Access 



<5:4> 



<3> 



MBO 



PB 



RAV 



Description 



Must be 1. This field is reserved. Writes 
are ignored, read as 1. 

Pass bad frames mode. When this bit is set, 
the SGEC passes frames that have been 
damaged by collisions or that are too short 
due to premature reception termination. 
Both events should have occurred within 
the collision window (64 bytes). Otherwise, 
other errors will be reported. 

When this bit is clear, these frames are 
discarded and never show up in the host 
receive buffers. 



<2:1> 



AP 



R/W 



NOTE 

Pass bad frames mode is subject to the 
address filtering mode. For example, to 
monitor the network, this mode must 
be set together with the promiscuous 
value of address filtering mode. 

Address filtering mode. These bits define 
the way incoming frames will be address- 
filtered: 



Value 



Meaning 



00 



01 



10 



11 



Normal — Incoming frames 
are filtered according to 
the values of the <HP> and 
<IF> bits of the setup frame 
descriptor. 

Promiscuous— All incoming 
frames are passed to the host, 
regardless of the <HP> bit 
value. 

All Multicast — All incoming 
frames with multicast 
address destinations are 
passed to the host. Incoming 
frames with physical address 
destinations are filtered 
according to the <HP> bit 
value. 

Unused — ^Reserved. 



<0> 



MBO 



Must be 1. This field is reserved. Writes 
are ignored. Read as 1. 
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NICSR6 Access 

Value after reset 
Read access rules 
Write access rules 

• <RE, IE, BE> 

• <BL, SE, 0M> 

• <FC> 

• <DC, PB, AF> 

• Start receive <SR>=1 

• Start transmit <ST>=1 

• Stop receive <SR>=0 

• Stop transmit <ST>=0 

After NICSR6 is written, the new value is readable from NICSR6. Hovirever, if the SGEC 
status does not match the related write access rules, the new mode setting and command 
do not take effect and the written information is lost, even if the SGEC matches the right 
condition later. 



83E0F00Oi6 or OSEOFOOOw. 
None. 

Unconditional. 

Reception and transmission processes stopped. 

Reception and transmission processes stopped, internal loopback 
mode 

Reception process stopped. 

Reception process stopped and NICSR3 initialized. 

IVansmission stopped and NIGSR4 initialized. 

Reception process running or suspended. 

lYansmission running or suspended. 



7.3.10 System Base Register (NICSR7) 

This NICSR contains the physical starting address of the VAX system page table. The 
host software must load this register before any address translation occurs, so that 
memory is not corrupted. Figure 7-17 shows the format of the register. Table 7-15 lists 
the bit descriptons. 



3 3 2 
1 9 



2 1 



MBZ 



System Base Address 



MBZ 



I/O Address: 2000 801 C 

Longword Read/Write Access 



Figure 7-17 NICSR7 Fonnat 
Table 7-15 NICSR7 Bits 



Bit 



Name 



Access 



Description 



<31:30> 
<29:00> 



MBZ 
SB 



WW 



Must be 0. Read as 0. Writes are ignored. 

System base address. The physical starting 
address of the VAX sys1>em page table. Not 
used if virtual addressing (VA) is cleared in 
all descriptors. 

This register should be loaded only 
one time after a reset. Subsequent 
modifications of this register may 
cause unpredictable results. 
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NICSR7 Access 

Value after reset 
Read access rules 
Write access rules 



Unpredictable. 

None. 

Writing once after initialization. 



7.3.11 Reserved Register (NICSR8) 

This register is reserved. 

7.3.12 Watchdog Timers (NICSR9) 

The SGEC has two timers that restrict the length of time in which the chip can receive 
or transmit. Figure 7-18 shows the format of the register. Table 7-16 lists the bit 
descriptions. 



1 1 

6 5 



Receive Timeout - RT 


Transmit Timeout - IT 1 



I/O Address: 2000 8024 
Longword Read/Write Access 



Figure 7-18 NICSR9 Format 
Table 7-16 NICSRSBits 



Bit 



Name 



Access 



<31:16> 



RT 



RW 



Description 



Receive watchdog timeout. The receive 
watchdog timer protects the host CPU 
against babbling transmitters on the 
network. If the receiver stays on for BT x 
16 cycles of the serial clock, the SGEC will 
cut oflF reception and set the NICSR5<RW> 
bit. If the timer is set to 0, it will never 
time out. 

The value of RT is an unsigned integer. 
With a 10 Mhz serial clock, this provides a 
range of 72 jxs to 100 ms. The default RT 
value is 1250, corresponding to 2 ms. 

The Rx watchdog timer is programmed only 
while the reception process is in the stopped 
state. 

NOTE 

A receive watchdog value between 
1 and 44 is forced to the minimum 
timeout value of 45 (72 |is). 
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Table 7-1 6 (Com.) NiCSR9 Bits 



Bit 



Name 



Access 



Description 



<15:00> 



TT 



RAV 



TVansmit watchdog timeout. The transmit 
watchdog timer protects; the network 
against babbling SGEC transmissions, 
in addition to any such circuitry present 
in tranceivers. If the transmitter stays on 
for 7T X 16 cycles of the serial clock, the 
SGEC will cut ofT the transmitter and set 
the NICSR5<TW> bit. If the timer is set to 
0, it will never time out, 

The value of TT is an unsigned integer. 
With a 10 Mhz serial click, this provides 
a range of 72 jis to lOOrns. The default TT 
value is 1250, corresponding to 2 ms. 

The transmit watchdog timer is 
programmed only while the transmission 
process is in the stopped state. 

NOTE 

A transmit watchdog value between 
1 and 44 is forced to the minimum 
timeout value of 45 (72 ^s). 



NICSR9 Access 




Value after reset 


OOOOOOOOie. 


Read access rules 


None. 


Write access rules 




• Receive watchdog timer 


Reception process stopped. 


• IVanmit watchdog 
timer 


IVansmission process stopped. 



The transmit and receive watchdog timers are enabled by default. These timers are set 
to their default values after hardware or software resets. 

7.3.13 Revision Number and Missed-Frame Count (NiCSRilO) 

This register contains a missed-frame counter and SGEC identification information. 
Figure 7-19 shows the register format. Table 7-17 lists the bit descriptions. 



2 11111 
9 8 7 6 5 



MBZ 



RN 



MFC 



Zl 



I/O Address: 2000 802C 
Longword Read-Only Access 



Figure 7-19 NICSRIO Format 
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Table 7-17 NICSRiOBits 



Bit 



Name 



Access 



Description 



<31:21> 
<20:16> 

<15:00> 



MBZ 

RN 

MFC 



Must be 0. Read as 0. Writes are ignored. 

R Chip revision number. This field stores the 

revision number for this particular SGEC. 

R Missed frame count. This field is the 

counter for the number of frames that were 
discarded and lost because host receive 
buffers were unavailable. The counter is 
cleared when read by the host. 



NICSR10 Access 

Value after reset 
Read access rules 
Write access rules 



OOO3OOOO16. 

Missed-frame counter cleared by read. 

Not applicable. 



7.3.14 Boot Message (NICSR11, 12, 13) 

These registers contain the boot message verification and processor fields. Figure 7-20 
shows the format of the registers. Table 7-18 lists the bit descriptions. 

3322222222221111111111 
10987654321098765432109876543210 



Verification VRF <31:00> 

3322222222221111111111 
10987654321098765432109876543210 



Zl 



Verification VRF <63:32> 
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3 


1 
2 


1 
1 


1 



9 


8 


7 6 5 4 3 2 10 










— 








I 


























1 





























Processor PRC 



NICSR11 
20000802C 



16 



NICSR12 
20008030 



16 



NICSR13 
20008034 



16 



Longword Read/Write Access 



Figure 7-20 Boot Message 
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Table 7-18 NICSR11,12,13 Bits 



Bit 


Name 


Access 


Description 


NICSRll 
<31:00> 


VRF<31:00> 


RAV 


Boot message verification field 
<31:00> 


NICSR12 
<31:00> 


VRP<63:32> 


RW 


Boot message verification field 
<63:32> 


NICSR13 
<07:00> 


PRO 


RW 


Boot message processor field 



NOTE 

The least significant bit of the verification field (VRF<0>) corresponds to the 

first incoming bit of the verification field in the serial boot message. 

NICSRll, 12,13 Access 

Value after reset OOOOOOOOie for each register— NICSRll, NICS5R12. and NICSR13. 

Read access rules None. 

Write access rules Boot message disabled (<NICSR6<BE> = 0.) 

7.3.15 Diagnostic Registers (NICSR14,15) 

These registers are reserved for diagnostic features. 

7.3.15.1 Diagnostic Breakpoint Address Register (NtCSRl4) 

This register is a virtual CSR. It contains the breakpoint address that causes the 
internal CPU to jump to a patch address. Figure 7-21 shows the format of the register. 
Table 7-19 lists the bit descriptions. This register can be loaded only in diagnostic mode 
(NICSR6 <0M>=<11>). 



3322222222221111111111 
10987654321 0987654321 098765 



3 2 10 



B 

E 


Code Restart Address 
(CRA) 


Breakpoint Address 
(BPA) 



Figure 7-21 NICSR14 Format 
Table 7-19 NiCSRl4Bits 



Bit 



Name 



TVpe 



<31> 



<30:16> 



BE 



CRA 



R/W 



R/W 



Description 



When this bit is set, the breakpoint is 
enabled. 

Code restart address. llUs is the first 
address in the internal RAM where the 
internal processor will jump to after a 
breakpoint occurs. 
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Table 7-19 (Cont.) NICSR14 Bits 



Bit 



Name 



Type 



<15:0> 



BPA 



RW 



Description 



Breakpoint address. This is the internal 
processor address where the program will 
halt and jump to the RAM-loaded code. 



NOTE 

This register works in conjunction with the diagnostic descriptors to allow software 

patches. 



NICSR14 Access 

Value after reset 
Read access rules 
Write access rules 
Violation 



OOOOOOOO16. 

None. 

Diagnostic mode. 

Addressing NICSR14 while NICSR5<DN> is deaaserted. 



7.3.15.2 Monitor Command Register (NICSR15) 

This register is a physical CSR. It contains the bits that select the internal test block 
operation mode. Figure 7-22 shows the format of the register. Table 7-20 Usts the bit 
descriptions. 



3322222222221111111111 
1098765432109876543210 



9876543210 



Address/Data 



QAD 



MBZ 



1 



Figure 7-22 NiCSRiS Format 
Table 7-20 NICSRIS Bits 



Bit 



Name 



Type 



<31:16> 



<15> 



ADDR/DATA 



ST 



RW 



W 



Description 



Before the examine cycle, this field points to 
the location to be read. Three cycles after 
the assertion of <ST>, the field contains the 
read data. 

Start read. When set, this bit starts the 
examine cycle — ^the data addresstsd by 
CSR<31:16> is fetched and stored into the 
same register field. This bit is reset by 
hardware at the end of the operation. 
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Table 7-20 (Com.) NICSRI 5 Bits 



Bit 



Name 



TVpe 



<14:13> 



QAD 



W 



Description 



Quad select bits. This field defines the 
specific four bits of the internal data bus 
or address bus that are monitored on 
the external test pins BM_L/TEST<3:0>. 
This field is meaningful only in test mode 
(TSM=1). 

The 2-bit code is interi:»reted as follows: 



QAD 


Data 


Address 


00 


<03:00> 


<03:00> 


01 


<07:04> 


<07:04> 


10 


<11:08> 


<11:08> 


11 


<15:12> 


0, lOP WR 
L,<13:12> 



<12> 



BS 



W 



<11:0> 



MBZ 



NICSRI 5 Access 

Value after reset 
Read access rules 
Write access rules 
'Violation 



Bus select. When reset, the internal 
data bus is monitored on the external 
test pins BM_L/TEST<:3:0>. When set, 
the monitoring is applied on the internal 
address bus. This bit is meaningful only in 
test mode (TSM=1). 

Must be 0. 



OOOOOFPFie. 

None. 

Reserved for debugging. 

Setting <ST> with arandom SGEC internal address. 



7.3.16 Descriptors and Buffers— Format 

The SGEC transfers frame data to and from receive and transmit buffers in host memory. 
These buffers are pointed to by descriptors that are also resident in host memoiy. 

There are two descriptor lists— one for receive, and one for transmit. The starting 
address of each list is written into NICSRs 3 and 4 respectively. A descriptor list is a 
(implicitly or explicitly) forward-linked list of descriptors. The last entry may point back 
to the first entry, thus creating a ring structure. Explicit chaining descriptors, through 
setting xDESl<CA> is called descriptor chaining. The descriptor lists reside in VAX 
physical memory address space. 

NOTE 

The SGEC first reads the descriptors, ignoring all unused bits regardless of 
their state. The only word the SGEC writes back is the first word ivDESO) of 
each descriptor. Unused bits in atDESO are written as 0. Unused bits in xDESl 
to ArDES3 may be used by the port driver, and the SGEC wiU never disturb them. 
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A data buffer can contain an entire frame or part of a frame, but it cannot contain 
more than a single frame. Buffers contain only data; buffer status is contained in the 
descriptor. The term data chaining is used to refer to frames spanning multiple data 
buffers. Data chaining can be enabled or disabled in reception, using NICSR6<DC>. 
Data buffers reside in VAX memory space, either physical or virtual. 

NOTES 

The virtual-to-physical address translation is based on the assumption that 

PTEs are locked in the host memory for the time the SGEC owns the related 

buffer. 

For the best performance in virtual addressing mode, PPTE vectors must not 
cross a page of the PPTE table. 

7.3.17 Receive Descriptors 

Figure 7-23 shows the format of receive descriptors. The following sections describe the 
words in the descriptor. 
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V 
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U 




U 


Butfer Size 


U 


Page Offset 




u 


U 


BUFFER SVAPTE/Physlcal Address 


U 



ROESO 
RDES1 
R0ES2 
RDES3 



- SGEC writes as 0. 

U - Ignored by the SGEC on read, never written. 

Figure 7-23 Receive Descriptor Format 

7.3.17.1 RDESO Word 

The RDESO word contains the status and length of the received frame. This word also 
indicates who owns the descriptor— the host or the SGEC. Table 7-21 list the RDESO bit 
descriptions. 



Table 7-21 RDESO Bits 



Bit 



<31> 

<30:16> 
<15> 



Name 



OW 

FL 
ES 



Description 



Owner bit. When set, this bit indicates the descriptor is owned 
by the SGEC. When cleared, this bit indicates the descriptor is 
owned by the host: The SGEC clears this bit after completing 
processing of the descriptor and its associated buffer. 

Frame length. This field indicates the length in bytes of the 
received frame. The field is meaningless if RDESO<LE> is set. 

Error summary. This bit is the logical OR of RDESO bits 
OF,CE,TN,CS,TL,LE,RF. 
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Table 7-21 (Com.) RDESO Bits 



Bit Name Description 



<14> LE Length error. When set, this bit indicates a frame truncation 

caused by one of the following: 

• The frame segment does not fit within the current buffer, 
and the SGEC does not own the next descriptor. The 
frame is truncated. 

• The receive watchdog timer expired. NICSR5<RW> is 
also set. 

<13:12> DT Data type. Indicates the type of frame the buffer contains, as 

follows: 



Value Meaning 



00 Serial received frame 

01 Internally looped back frame 

10 Externally looped back frame, serial received 

frame. 



<11> RF Runt frame. When set, this bit indicates the frame was 

damaged by a collision or premature termination before the 
collision window had passed. Runt frames are passed to the 
host only if (NICSR6<PB>) is set. This bit is meaningless if 
RDES0<OF> is set. 

<10> BO Buffer overflow. When set, this bit indicates that the frame 

has been truncated due to a buffer that was too small to fit 
the frame size. This bit may be set only if data chaining is 
disabled (NICSR6<DC> = 1). 

<09> FS First segment. When set, this bit indicates that this buffer 

contains the first segment of a frame. 

<08> LS Last segment. When set, this bit indicates that this buffer 

contains the last segment of a frame and status information is 
valid. 

<07> TL Frame too long. When set, this bit indicates the frame length 

exceeds the maximum Ethernet specified size of 1518 bytes. 

NOTE 

The frame too long bit is only a firam<» length indication 

and does not cause any frame truncation. 

<06> CS Collision seen. When set, this bit indicat<!s the frame was 

damaged by a collision that occurred after the 64 bytes 
following the SFD. 

<05> FT Frame type. When set, this bit indicates the frame is an 

Ethernet type frame (frame length field is > 1500). When 
clear, this bit indicates the frame is an USEE 802.3 type 
frame. This bit is meaningless for Runt frames < 14 bytes. 

<4> 
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-Table 7-21 (Com.) RDESO Bits 



Bit 



Name 



<03> 



<02> 



TN 



DB 



Description 



TVanslation not valid. When set, this bit indicates that a 
translation error occurred when the SGEC was translating 
a VAX virtual buffer address. This bit will set only if 
RDESl<VA> was set. The reception process remains in 
the running state and tries to acquire the next descriptor. 

Dribbling bits. When set, this bit indicates the frame 
contained a noninteger multiple of 8 bits. This error is 
reported only if the number of dribbling bits in the last byte 
is greater than 2. This bit is meaningless if RDESO<CS> or 
RDESO<RF> are set. 

The CRC check is performed independent of this error. 
However, only whole bytes are run through the CRC logic. 
Consequently, received frames with up to 6 dribbling 
bits will have this bit set. But if <CE> (or another error 
indicator) is not set, these firames should be considered 
valid: 



CE 



DB 



Error 



<01> 
<00> 



CE 
OP 






1 
1 





1 



1 



None 
None 

CRC error 
Alignment error 



CRC error. When set, this bit indicates that a CRC error has 
occurred on the received frame. 

Overflow. When set, this bit indicates that received data in 
this descriptor's buffer was corrupted due to internal FIFO 
overflow. This action generally occurs if SGEC DMA requests 
are not granted before the internal receive FIFO fills up. 



7.3.17.2 RDES1 Word 

The RDESl word contains a chain address and virtual addressing bit that affect the 
RDES3 word. Table 7-22 lists the RDESl bit descriptions. 
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Table 7-22 RDESI Bits 



Bit 



Name 



<31> 



CA 



<30> 



VA 



Description 



Chain address. When this bit is set, RDES3 is interpreted 
as another descriptor's VAX physical address. This allows 
the SGEC to process multiple, noncontiguous descriptor lists 
and explicitly chain the lists together. Note that contiguous 
descriptors are implicitly chained. 

In contrast to what is done for a receive buffer descriptor, 
the SGEC clears neither the ownership biit RDES0<OW> nor 
one of the other bits of RDESO of the chain descriptor after 
processing. 

lb protect against an infinite loop, a chain descriptor pointing 
back to itself is seen as owned by the host, regardless of the 
ownership bit state. 

Virtual addressing. When this bit is set, RDES3 is interpreted 
as a virtual address. The type of virtual address translation is 
determined by the RDES1<VT> bit. The iSGEC uses RDES3 
and RDES2<page ofFset> to perform a VAX virtual address 
translation process to obtain the physical address of the 
buffer. When this bit is clear, RDES3 is interpreted as the 
actual physical address of the buffer: 



VA 



VT 



Addressing mode 



X 


1 



Physical 

Virtual— SVAPTE type 

Virtual— PAPTE type 



<29> 



VT 



<28:0> 



Virtual type. If virtual addressing (RDESl<VA> = 1) is used, 
this bit indicates the type of virtual addrijss translation. 
When this bit is set, the buffer address RJDES3 is interpreted 
as a system virtual address of the page table entry (SVAPTE). 
When this bit is clear, the buffer address is interpreted as a 
physical address of the page table entry (PAPTE). This bit is 
meaningful only if RDESl<VA> is set. 



7.3.17.3 RDES2 Word 

This word contains the buffer size of the data buffer, as well as the by1:e offset of buffer 
within the page. Table 7-23 lists the RDES2 bit descriptions. 

Table 7-23 RDES2BltS 



Bit 



Name 



<31> 
<30:16> 



U 
BS 



Description 



Unused. Ignored by the SGEC on reads. Never written. 
Buffer size. The size, in bytes, of the data buffer. 

NOTE 

Receive buffers size must be an even number of bytes. 
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Table 7-23 (Cont.) RDES2 Bits 



Bit 



<15:9> 
<08:00> 



Name 



Description 



U Unused. Ignored by the SGEC on reads. Never written. 

PO Page offset. The byte offset of the buffer within the page. This 

field is meaningful only if RDESl<VA> is set. 

NOTE 

Receive buffers must be word-aligned. 



7.3.17.4 RDES3 Word 

The RDES3 word is interpreted as the address of either the page table entry or the 
the buffer, depending on the setting of the RDESl word. Table 7-24 lists the bit 
descriptions. 

Table 7-24 RDES3BltS 



Bit 



Name 



<31:00> 



Description 



SV/PV/PA SVAPTE/PAPTE/Physical address. If RDES1<VA> is set, 

RDES3 is interpreted as the address of the page table entry 
and used in the virtual address translation process. The 
setting of RDES1<VT> determines the type of the address- 
system virtual address (SVAPTE) or physical address 
(PAPTE). 

If RDESl <VA> is clear, RDES3 is interpreted as the physical 
address of the buffer. When RDES1<CA> is set, RDES3 is 
interpreted as the VAX physical address of another descriptor. 

NOTE 

Receive buffers must be word-aligned. 



7.3.17.5 Receive Descriptor Status Validity 

Table 7-25 summarizes the validity of the receive descriptor status bits regarding the 
Reception completion status: 

Table 7-25 Receive Descriptor Status Validity 



Reception 
Status 



Overflow 

Collision after 512 bits 

Runt firame 

Runt frame < 14 bytes 

Watchdog timeout 



Reception Status Report 



RF TL CS FT DB CE ES,LE,B04)T,FS^S,FL,TN,0F 



M 


V 


M 


V 


M 


M 


V 


V 


V 


V 


M 


M 


V 


V 


V 


V 


M 


M 


V 


V 


V 


M 


M 


M 


V 


V 


M 


V 


M 


M 



V 
V 
V 
V 
V 



V = valid. 

M = meaningless. 
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7.3.18 Transmit Descriptors 

Figure 7-24 shows the format of the transmit descriptors. The following; sections describe 
each word in the descriptor. 
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- SGEC writes as 0. 

U • ignored by the SGEC on read, never written. 



Figure 7-24 Transmit Descriptor Format 

7.3.18.1 TDESO Word 

The TDESO word contains the status of the transmitted frame. TDESO also indicates 
who owns the descriptor— the SGEC or the host. Table 7-26 lists the bit descriptions. 

Tabie7-26 TDESO Bits 



Bit 



Name 



Description 



<31> 



<29:16> 



OW 



TDR 



<15> 
<14> 

<13> 



ES 
TO 

MBZ 



Owner bit. When set, this bit indicates the descriptor is owned 
by the SGEC. When cleared, this bit indicates the descriptor is 
owned by the host. The SGEC clears this Idt upon completing 
processing of the descriptor and its associated buffer. 

Time domain reflectometer. This field is a count of bit time. 
The count is useful for locating a fault on the cable, using the 
velocity of propagation on the cable. This field is valid only if 
TDESO<EC> is also set. Two excessive collisions in a row and 
with the same or similar TDR values (within 20) indicate a 
possible cable open. 

Error summaiy. This bit is the logical OR of UF, TN, EC, LC, 
NC, LO, LE and TO. 

IVansmit watchdog timeout. If this bit is Eiet, the transmit 
watchdog timer has timed out, indicating the SGEC 
transmitter was babbling. The interrupt NfICSR5<TW> is 
set, and the transmission process is aborted and placed in the 
stopped state. 
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Table 7-26 (Cont.) TDESO Bits 

Bit Name Description 



<12> LE Length error. When set, this bit indicates one of the following: 

• Descriptor unavailable (owned by the host) in the middle 
of data-chained descriptors. 

• Zero-length buifer in the middle of data-chained 
descriptors. 

• Setup or diagnostic descriptors (data type TDES1<DT> <> 
0) in the middle of data-chained descriptors. 

• Incorrect order of first-segment TDES1<FS> and last- 
segment TDES1<LS> descriptors in the descriptor list. 

The transmission process enters the suspended state and sets 
NICSR5<TI>. 

<11> LO Loss of carrier. When set, this bit indicates a loss of carrier 

during transmission (possible short circuit in the Ethernet 
cable). 

This bit is meaningless in internal loopback mode 
(NICSR5<0M>=1). 

<10> NC No carrier. When set, this bit indicates the carrier signal from 

the transceiver was not present during transmission (possible 
problem in the transceiver or transceiver cable). 

This bit is meaningless in internal loopback mode 
(NICSR5<0M>=1). 

<09> LC Late collision. When set, this bit indicates frame transmission 

was aborted due to a late collision. This bit is meaningless if 
TDESO<UF>. 

<.08> EC Excessive collisions. When set, this bit indicates that the 

transmission was aborted because 16 successive collisions 
occurred while attempting to transmit the current frame. 

<07> HF Heartbeat fail. When set, this bit indicates a heartbeat 

collision check failure. The transceiver failed to return 
a collision pulse as a check after the transmission. Some 
tranceivers do not generate heartbeat, so they always have 
this bit set. If the transceiver does support heartbeat, this 
bit indicates a transceiver failure. The bit is meaningless if 
TDESO<UF>. 

<06:03> CC Collision count. This is a 4-bit counter, indicating the 

number of collisions that occurred before the transmission 
attempt succeeded or failed. This bit is meaningless when 
TDESO<EC> is also set. 

<02> TN TVanslation not valid. When set, this bit indicates that a 

translation error occurred when the SGEC was translating a 
VAX virtual buffer address. TN may only set if TDES1<VA> 
was set. The transmission process enters the suspended state 
and sets NICSR5<TI>. 
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Table 7-26 (Cont.) TDESO Bits 



Bit 



Name 



Description 



<01> 



UF 



<00> 



DE 



Underflow error. When set, this bit indicates that the 
transmitter has truncated a message due to data being late 
from memory. UP indicates that the SGEC encountered 
an empty transmit FIFO while transmitting a frame. The 
transmission process enters the suspended state and sets 
NICSR5<TI>. 

Deferred. When set, this bit indicates that the SGEC had to 
defer while trying to transmit a frame. Thiis condition occurs 
if the channel is busy when the SGEC is ready to transmit. 



7.3.18.2 TDES1 Word 

The TDESl word contains a chain address and virtual addressing bit that affect the 
TDES3 word. Table 7-27 lists the TDESl bit descriptions. 

Table 7-27 TDES1 Bits 



Bit 



Name 



Description 



<31> 



CA 



<30> 



VA 



Chain address. When this bit is set, TDES3 is interpreted as 
another descriptor's VAX physical address. This allows the 
SGEC to process multiple, noncontiguous descriptor lists and 
explicitly chain the Hsts. Note that contiguous descriptors are 
implicitly chained. 

In contrast to what is done for a receive buffer descriptor, the 
SGEC does not clear the ownership bit TECS0<OW> or one of 
the other bits of the TDESO chain descriptor after processing. 

Tb protect against an infinite loop, a chain descriptor that 
points back to itself is seen as ovmed by the host, regardless 
of the setting of the ownership bit. 

Virtual addressing. When thsi bit is set, TDES3 is interpreted 
as a virtual address. The TDESl <VT> bit determines the 
type of virtual address translation. The SGEC uses TDES3 
and TDES2<page oflset> to perform a VAIK virtual address 
translation process and obtain the physical address of the 
buffer. When clear, TDES3 is interpreted as the actual 
physical address of the buffer. 



VA 



VT 



Addressing lAode 






X 


Physical 


1 





Virtual— SVAJPTE type 


1 


1 


Virtual— PAFDE type 
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Table 7-27 (Com.) TDESI Bits 



Bit 



Name 



Description 



<29:28> 



DT 



Data type. This field Indicates the type of data the buffer 
contains, according to the following table: 



Value 



Meaning 



00 
10 

11 



Normal transmit frame data 

Setup frame (Explained in Section 7.3.19.) 

Diagnostic frame 



<27> 



AC 



<26> 


FS 


<25> 


LS 


<24> 


IC 



<23> 



VT 



<22:0> 



U 



Add CRC disable. When this bit is set, the SGEC does not 
append the CRC to the end of the transmitted frame, lb take 
effect, this bit must be set in the descriptor where FS is set. 

NOTE 

K the transmitted frame is shorter than 64 bytes, the 
SGEC adds the padding field and the CRC regardless of 
the <AC> flag. 

First segment. When set, this bit indicates the buffer contains 
the first segment of a frame. 

Last segment. When set, this bit indicates the buffer contains 
the last segment of a frame. 

Interrupt on completion. When the bit is set, the SGEC sets 
NICSR5<TI> after this frame has been transmitted, lb take 
effect, this bit must be set in the descriptor where LS is set. 

Virtual type. If virtual addressing is used (TDES1<VA> = 
1), this bit indicates the type of virtual address translation. 
When this bit is set, the buffer address TDES3 is interpreted 
as a system virtual address of the page table entry (SVAPTE). 
When this bit is clear, the buffer address is interpreted as a 
physical address of the page table entry (PAPTE). This bit is 
meaningful only if TDESl<VA> is set. 



7.3.18.3 TDES2 Word 

This word contains the buffer size of the data buffer, as well as the byte offset of buffer 
within the page. Table 7-28 lists the TDES2 bit descriptions. 
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Table 7-28 TDES2Bits 



Bit 



Name 



Description 



<31> 
<30:16> 



U 
BS 



<08:00> 



PO 



Buffer size. The size, in bytes, of the date buffer. If this field 
is 0, the SGEC ignores this buffer. The frame size is the sum 
of all BS fields of the frame segments (Ixstween and including 
the descriptors that have TDES1<FS> and TDES1<LS> set.) 

NOTE 

K the port driver wants to suppress transmission of a 

frame, this field must be set to in all descriptors that 

make up the frame, before the SGEC acquires them. If 

this rule is not adhered to, corrupted frames may be 

transmitted. 

Page ofTset. This field is the byte offset of the buffer within 
the page. Only meaningful if TDESl<VrtL> is set. 

NOTE 

IVansmit buffers may start on arbitrary bjrte 

boundaries. 



7.3.18.4 T0ES3 word 

The TDES3 word is interpreted as the address of either the page table entry or the 
the buffer, depending on the setting of the TDESl word. Table 7-29 lists the bit 
descriptions. 



Table 7-29 TDESSBIts 



Bit 



Name 



Description 



<31:00> 



SV/PV/PA SVAPTE/PAPTE/Physical address. If TE>ES1<VA> is set, 

TDES3 is interpreted as the address of the page table entry 
and used in the virtual address translation process. The 
setting of TDESl<VT> determines the type of the address — 
system virtual address (SVAPTE) or physical address 
(PAPTE). 

If TDES1<VA> is clear, TDES3 is interpreted as the physical 
address of the buffer. When TDESl<CA> is set, RDES3 is 
interpreted as the VAX physical address of another descriptor. 

NOTE 

IVansmit buffers may start on arbitrary byte 

boundaries. 



7.3.18.5 Transmit Descriptor Status Validity 

Table 7-30 summarizes the validity of the transmit descriptor status bits regarding the 

transmission completion status: 
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Table 7-30 Transmit Descriptor Status Validity 



Transmission 
Status 


Transmission Status Report 






LO 


NC 


LC 


EC 


HF 


CC 


{ES,TOJLE,TN,UF^E) 




Underflow 


M 


M 


V 


V 


M 


V 


V 




EMcessive collisions 


V 


V 


V 


V 


V 


M 


V 




Watchdog timeout 


M 


V 


M 


M 


M 


V 


V 




Internal loopback 


M 


M 


V 


V 


M 


V 


V 




V = valid. 

M = meaningless. 



7.3.19 Setup Frame 

A setup frame defines SGEC Ethernet destination addresses. These addresses are to 
filter all incoming frames. The setup frame is never transmitted over the Ethernet or 
looped back to the receive list. While the setup frame is being processed, the receiver 
logic temporarily disengages from the Ethernet wire. The setup frame size is always 128 
bytes and must be wholly contained in a single transmit buffer. There are two types of 
setup frames: 

1. Perfect filtering addresses (16) list 

2. Imperfect filtering hash bucket (512) heads + one physical address 

7.3.19.1 First Setup Frame 

A setup frame must be queued (placed in the transmit list with SGEC ownership) to the 
SGEC before the reception process starts. The only exception is when the SGEC operates 
in promiscuous reception mode. 

The self-test completes with the SGEC address filtering table fully set to 0. A 
reception process that starts before a setup frame is loaded will '^J®^*^]^** 
incoming frames except those with a destination physical address of OOOOOOh . 

7.3.19.2 Subsequent Setup Frame 

Subsequent setup frames may be queued to the SGEC, regardless of the reception process 
state. The only requirement for processing these setup frames is that the transmission 
process be in the running state. The setup frame is processed afler all preceding frames 
have been transmitted and the current frame reception (if any) is completed. 

The setup frame does not affect the reception process state. However, while the setup 
frame is being processed, the SGEC is disengaged from the Ethernet wire. 
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7.3.19.3 Setup Frame Descriptor 

Figure 7-25 shows the format of the setup frame descriptor. Table 7-31 lists the bit 
descriptions. The following sections describe each word of the descriptor. 



3 

1 


3 



2 2 

9 8 


2 

7 


2 
6 


2 
5 


2 
4 


2 2 2 2 1111 

3 2 10 9 8 7 6 


1 

s 


1 

4 


1 

3 


1 1 

2 1 


1 

9 8 7 6 5 .1 


3 2 1 





O 
W 


MBZ 


E 
S 





S 
E 


MBZ 





U 


DT 


U 


1 
F 


H 

P 


1 
C 


U 


u 


Buller Size 


u 


u 


Sotup BultBf Physical Address 


U 



SDESO 
SDES1 
SDES2 
SDES3 



- SGEC writas as 0. 

U - ignored by the SGEC on read, never written. 



Figure 7-25 Setup Frame Descriptor Format 



Table 7-31 Setup Frame Descriptor Bits 



Word 



Bit 



Name 



Description 



SDESO 



<13> 



<15> 



<31> 



SE 



ES 



OW 



SDESl 



<24> 



<25> 



IC 



HP 



Setup error. When set, this bit indicates the 
setup frame's buffer size is not 128 bytes. 

Error summary. This bit is set when SE is 

set. 

Owner bit. When set, this bit indicates the 
descriptor is owned bj' the SGEC. When 
cleared, this bit indic£Ltes the descriptor 
is owned by the host. The SGEC clears 
this bit upon completing processing of the 
descriptor and its associated buffer. 

Interrupt on completion. When this bit is 
set, the SGEC sets NICSR5<TI> after this 
setup frame is processed. 

Hash/Perfect filtering mode. When this bit 
is set, the SGEC interprets the setup frame 
as a hash table and does an imperfect 
address filtering. The imperfect mode 
is useful when there are more than 16 
multicast addresses to listen to. 

When this bit is clear, the SGEC does a 
perfect address filter of incoming frames 
according to the addresses specified in the 
setup frame. 
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Table 7-31 (Cent.) Setup Frame Descriptor Bits 



Word 



Bit 



<26> 



SDES2 
SDES3 



<29:28> 

<30:16> 
<29:1> 



Name 



IF 



DT 

BS 
PA 



Description 



Inverse filtering. When this bit is set, the 
SGEC does an inverse filtering. That is, 
the SGEC accepts the incoming frames with 
a destination address not matching the 
perfect addresses, and rejects the ft-ames 
with destination address matching one of 
the perfect addresses. 

This bit is meaningful only for perfect 
filtering (SDES1<HP>=0), while 
promiscuous and all multicast modes are 
not selected (NICSR6<AF>=0). 

Data type. Must be 2 to indicate setup 
frame. 

Buffer size. Must be 128. 

Physical address. The physical address of 
the setup buffer. 

NOTE 

The setup buffer must be word-aligned. 



7.3.19.4 Perfect Filtering Setup Frame Buffer 

This section describes how the SGEC interprets a setup frame buffer when SDES1<HP> 
is clear. 

The SGEC can store 16 full 48-bit Ethernet destination addresses. It compares the 
addresses of any incoming frame to these stored addresses and rejects frames based on 
the status of Inverse_Filtering flag SDES1<IF>: 

• If SDES1<IF> = 0, reject addresses that do not match. 

• If SDES1<IF> = 1, reject addresses that do match. 

The setup frame must always supply all 16 addresses. Any mix of physical and multicast 
addresses can be used. Unused addresses should be duplicates of one of the valid 
addresses. Figure 7-26 shows the format for addresses. 
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31 16 15 





Bytes <3:0> 
<7:4> 


Perfect Address_00 

XXXXXXXXXXXXXXXl 




Perfect Address_01 

XXXXXXXXXXXXXXXl 




Perfect Address_02 

XXXXXXXXXXXXXXXl 




Perfect Address_03 

XXXXXXXXXXXXXXXl 




Perfect Address_04 

XXXXXXXXXXXXXXXl 








Perfect Address_05 





Bit 



-••- Physical/Multicast Bit 



<123:120> 
<127:124> 



Perfect Address_13 

XXXXXXXXXXXXXXXl 



Perfect Address_14 

XXXXXXXXXXXXXXXl 



Perfect Address_15 

XXXXXXXXXXXXXXXl 



xxxxxx = Don't care. 



Figure 7-26 Perfect Filtering Setup Frame Buffer Format 

The low-order bit of the low-order bytes is the address's multicast bit 
Example 7-1 shows a fragment of a perfect filtering setup buffer. 
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Ethernet addresses to be filtered: 
I A8-09-65-12-34-76 
09-BC-87-DE-03-15 



Setup frame buffer fragment: 
12 6509A8 
00007634 
DE87BC09 
00001503 



O Two Ethernet addresses written for address display. 
® Those two addresses as they would appear in the buffer. 

Example 7-1 Perfect Filtering Buffer 

7.3.19.5 Imperfect Filtering Setup Frame Buffer 

This section describes how the SGEC interprets a setup frame buffer when SDES1<HP> 
is set. 

The SGEC can store 512 bits, serving as hash bucket heads, and one physical 48-bit 
Ethernet address. Incoming frames with multicast destination addresses are subjected to 
the imperfect filtering. Frames with physical destination addresses are checked against 
the single physical address. 

Multicast Address For any incoming frame with a multicast destination address, the 
SGEC applies the standard Ethernet CRC function to the first 6 bytes containing the 
destination address. Then the SGEC uses the most significant 9 bits of the result as a bit 
index into the table. If the indexed bit is set, the frame is accepted. If it is cleared, the 
frame is rejected. 

This filtering mode is called imperfect, because multicast frames not addressed to this 
station may slip through, but the filtering still reduces the number of frames present to 
the host. 
Figure 7-27 shows the format for the hash table and the physical address. 



188 Interface Subsystems 



31 



Bytes <3:0> 
<7:4> 



16 15 



Hash Filter 00 
Hash Filter 01 



Bit 



<63:60> 

<67:64> 
<71:68> 

<75:72> 



<127:120> 



Hash Filter 14 
Hash Filter 15 



Physical Address 

XXXXXXXXXXXXXXXXl 



*- Physical/Multicast bit 



xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 



xxxxxx = don't care. 



Figure 7-27 Imperfect Filtering Setup Frame Format 

Bits are sequentially numbered from right to left, down the table. For example, if 
CRC(destination address)<8:0> = 33, the SGEC examines bit 1 in the second longword. 

Example 7-2 shows an imperfect filtering setup frame buffer. 

Ethernet addresses to be filtered: 

> 25-00-25-00-27-00 
A3-C5-62-3F-25-87 
D9-C2-C0-99-0B-82 
7D-48-4D-FD-CC-0A 
E7-C1-96-36-89-DD 
61-CC-28-55-D3-C7 
6B-46-0A-55-2D-7E 

I A8-12-34-35-76-08 

Setup frame buffer: 

> 00000000 
10000000 
00000000 
00000000 
00000000 
40000000 
00000080 
00100000 



Example 7-2 (Com.) Imperfect Filtering Buffer 
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00000000 
10000000 
00000000 
00000000 
00000000 
00010000 
00000000 
00400000 
O 3534 12A8 
00000876 

O Ethernet Multicast addresses written according to the DEC STD 134 specification for 
address display. 

9 An Ethernet physical address. 

Q The first part of an imperfect filter setup frame buffer, with set bits for the O 
multicast addresses. 

O The second part of the buffer with the ® physical address. 

Example 7-2 Imperfect Filtering Buffer 

Example 7-3 shows a C program to compute the hash bucket heads and create the 
resulting setup frame buffer. 

♦include <stdio> 

unsigned int imperfect_setup_frame [128/4 ] , /* The setup buffer - 128 */ 
/* bytes */ 
address, 
crc[33]; /* CRC residue vector */ 

main () 

{ 

int i, hash; 
/* */ 

/* This program accepts 4 8-bit Ethernet addresses and builds a setup frame */ 
/* buffer for imperfect filtering. */ 

/* */ . *, 

/* Addresses must be entered in hexadecimal. The multicast bit is the least */ 

/* significant bit of the least significant digit of the first 32 bits. */ 

/* Nonmulticast addresses are ignored. */ 

/* */ 

/* Input is terminated by typing CTRL/Z. The program then prints out */ 

/* the buffer. */ 

/* */ 

main_loop: 

/* Prompt user for the Ethernet address */ 
printf("\n\n Enter the first 32 bits (HEX) - ") ; 
if (scanf("%x", iaddress[0]) == EOF) 
{ 

printf ("\n\n Imperfect Setup buffer printoutXn") ; 
for (i-0; i < 128/4; i++) 
printf ("%08X\n", imperfect_setup_f rame [i ] ) ; 

exit (1) ; 
} 

Example 7-3 (Com.) Creating an Imperfect Filtering Setup Frame Buffer (C Program) 
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printf("\n Enter the remaining 16 bits (HEX) - "); 
scanf ("%x",&address[l] ) ; 

/* Ignore non multicast addresses */ 
if ( (address [0] & 1) — 0) 
goto main_loop; 

/* Compute the hash function */ 

hash = address_crc (address [0] ,addressY3vMfgyY*"vbwlm( 

/* Set the appropriate bit in the Setup buffer */ 
imperfect_setup_frame [hash/32] = 
iraperfect_setup_frame [hash/32] | 1 « hash%32; 

goto main_loop; 
} 

int address_crc( unsigned int lsb32 , unsigned int msbl6} 
{ 

int j,hash = 0; 

/* Set CRC to all I's */ 

for (j=0; j < 33; j++) 
crc[j] = 1; 

/* Compute the address CRC by running the CRC 48 steps */ 

for (j=0; j < 32; j++) 

nextstate(lsb32 & l«j ? 1 : 0); 

for (j=0; j < 16; j++) 

nextstate(msbl6 & l«j ? 1 : 0); 

/* Extract 9 most significant bits from the CRC residue */ 

for (j-24; j < 33; j++) 
hash - hash«l | crc[j]; 

return hash; 



nextstate (dat) 

int dat; 

{ 

int i,mean; 

mean = crc[32) " dat; 

for(i=32;i>=2;i — ) crc [i]-crc [i-l] ; 

crc[27] - crc [27] " mean; 

crc [24] - crc [24] '^ mean; 

crc [23] - crc [23 J •^ mean; 

crc [17] - crc [17] •* mean; 

crc [13] = crc [13] * mean; 

crc [12] - crc [12] * mean; 

crc [11] - crc [11] " mean; 

crc[9] = crc[9] *■ mean; 

crc[8] «- crc [8] " mean; 

crc - crc " mean; 

crc [5] - crc [5] * mean; 

crc[3] - crc[3J " mean; 

crc[2] - crc[2] " mean; 

crc[l] - mean; 

Example 7-3 Creating an Imperfect FIKering Setup Frame Buffer (C Program) 
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7.3.20 Hardware and Software Reset 

The SGEC responds to two types of reset commands— a hardware reset through the 
RESET_L pin and a software reset command triggered by setting NICSR6<RE>. In both 
cases, the SGEC aborts all ongoing processing and starts the reset sequence. The SGEC 
restarts and reinitializes all internal states and registers. No internal states are retained, 
no descriptors are owned, and all the host-visible registers are set to 0, except where noted. 

NOTE . ^ 

The SGEC does not explicitly disown any owned descriptor, so the owned bit of 
descriptor may be left in a state indicating SGEC ownership. 

Table 7-32 lists the NICSR fields that are not set to after a reset. 
Table 7-32 NICSR Field Values After Reset 



Field Value 



NICSR3 Unpredictable 

NICSR4 Unpredictable 

NICSR5<DN> 1 

NICSR6<BL> 1 

NICSR6<RE> Hardware reset: unpredictable 

Software reset: 1 

NICSR7 Unpredictable 

NICSR9 RT = TT = 1250 



After the reset sequence completes, the SGEC executes the self-test procedure to do basic 
checking. 

If the self-test completes successfully, the SGEC initializes the SGEC and sets the 
initialization done flag NICSR5<ID>. 

At the first failure detected in one of the basic tests of the self-test routine, the test is 
aborted and the self-test failure NICSR5<SF> bit is set together with the self-test error 
status NICSR5<SS> bit. SS indicates the reason for the failure. 

NOTE 

The self-test takes 25 ms to complete after a hardware or software reset. 

If the initialization completes successfully, the SGEC is ready to accept further host 
commands. Both the reception and transmission processes are placed in the stopped 
state. 

Successive reset commands (hardware or software) may be issued. The only restriction 
is that SGEC NICSRs should not be accessed during a 1-microsecond period following 
the reset. Access during this period will produce a CP bus timeout error. Access to 
SGEC NICSRs during the self-test are permitted; however, only NICSRS reads should be 
performed. 
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7.3.21 Interrupts 

Interrupts are generated as a result of various events. NICSR5 contains all the status 
bits that can cause an interrupt, provided NICSR6<IE> is set. The port; driver must clear 
the interrupt bits (by writing a 1 to the bit position) to enable further interrupts from the 
same source. 

Interrupts are not queued. If the interrupting event reoccurs before the port driver has 
responded to it, no additional interrupts are generated. For example, NICSR5<RI> 
indicates one or more frames were delivered to host memory. The port driver should scan 
all descriptors, from its last recorded position up to the first SGEC-owned descriptor. 

An interrupt is generated only once for simultaneous, multiple interruptting events. It is 
the port driver's responsibility to scan NICSR5 for the interrupt cause(s). The interrupt 
is not regenerated, unless a new interrupting event occurs after the host acknowledged 
the previous one, and provided the port driver cleared the appropriate NICSR5 bit(s). 

For example, NICSR5<TI> and NICSR5<RI> may both set. The host acknowledges the 
interrupt, and the port driver begins executing by reading NICSR5. Now NICSR5<RU> 
sets. The port driver writes back its copy of NICSR5, clearing NICSR5<TI> and 
NICSR5<RI>. After the host IPL is lowered below the SGEC level, another interrupt 
is delivered with the NICSR5<RU> bit set. 

If the port driver clears all NICSR5 set interrupt bits before the intenrupt has been 
acknowledged, the interrupt is suppressed. 

7.3.22 Startup Procedure 

The port driver must perform the follwoing sequence of checks and commands in order to 
prepare the SGEC for operation: 

1. Wait for the SGEC to complete its initialization sequence by polling on NICSR5<ID> 
and NICSR5<SF> (Section 7.3.8). 

2. Examine NICSR5<SF> to find out whether the SGEC passed its self-test. If it did 
not, it should be replaced (Section 7.3.8). 

3. Write NICSRO to establish system configuration dependent parameters 
(Section 7.3.4). 

4. If the port driver intends to use VAX virtual addresses, NICSR7 must be written to 
identify the system page table to the SGEC (Section 7.3.10). 

5. If the port driver wants to change the default settings of the watchdog timers, it must 
write to NICSR9 (Section 7.3.12). 

6. The port driver must create the transmit and receive descriptor lists, then write to 
NICSR3 and NICSR4 to provide the SGEC with the starting address of each list. The 
first descriptor on the transmit list usually contains a setup frame (Section 7.3.7). 

7. Write NICSR6 to set global operating parameters and start the transmission and 
reception processes. Both processes enter the running state, then try to acquire 
descriptors from the respective descriptor lists and begin processing incoming and 
outgoing frames (Section 7.3.9). The reception and transmission processes are 
independent of each other, so they can be started and stopped separately. 

CAUTION 

If address filtering (either perfect or imperfect) is desired, Ithe reception 

process should start only after the setup frame has been prc»cessed. 
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8. The port driver now waits for any SGEC interrupts. If either the reception or 
transmission processes were suspended, the port driver must issue the poll demand 
command after it has rectified the suspension cause. 

7.3.23 Reception Process 

While in the running state, the reception process polls the receive descriptor hst, 

attempting to acquire free descriptors. Incoming frames are processed and placed in 

acquired descriptors' data buffers. Status information is written to the descriptor RDESO 

words. 

The SGEC always tries to acquire an extra descriptor in anticipation of incoming frames. 

Descriptor acquisition is attempted under the following conditions: 

• Immediately after being placed in the running state by setting NICSR6<SR> 

• When the SGEC begins writing frame data to a data buffer pointed to by the current 
descriptor 

• At the last acquired descriptor chained (RDES1<CA> = 1 ) to another descriptor 

• When a virtual translation error is encountered RDESO<TN> while the SGEC is 
translating the buffer base address of the acquired descriptor 

As incoming frames arrive, the SGEC strips the preamble bits and stores the frame 
data in the receive FIFO. Concurrently, the SGEC performs address filtering according 
to NICSR6 fields AF, HP, and the SGEC's internal filtering table. If the frame fails the 
address filtering, the frame is ignored and purged from the FIFO. Frames shorter than 
64 bytes, due to collision or premature termination, are also ignored and purged from the 
FIFO, unless NICSR6<PB> is set. 

After 64 bytes are received, the SGEC begins transferring the frame data to the buffer 
pointed to by the current descriptor. If data chaining is enabled (NICSR6<DC> clear), the 
SGEC writes any frame data overflowing the current data buffer into successive buffer(s). 
The SGEC sets the RDESO<FS> and RDESO<LS> in the first and last descriptors, 
respectively, to delimit the frame. Descriptors are released (RDES0<OW> bit cleared) as 
their data buffers fill up or after the last segment of a frame is transferred to a buffer. 

The SGEC sets RDESO<LS> and the RDESO status bits in the last descriptor it releases 
for a frame. After the last descriptor of a frame is released, the SGEC sets NICSR5<RI>. 

This process is repeated until the SGEC encounters a descriptor flawed as owned by 
the host. After filling up all previously acquired buffers, the reception process sets 
NICSR5<RU> and enters the suspended state. The position in the receive list is retained. 

Any incoming frames received in this state cause the SGEC to fetch the current 
descriptor in the host memory. If the descriptor is now owned by the SGEC, the reception 
process re-enters the running state and starts the frame reception. 

If the descriptor is still owned by the host, the SGEC increments the missed-frames 

counter (NICSR10<MFC>) and discards the frame. 

Table 7-33 summarizes the reception process state transitions and resulting actions: 
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Table 7-33 Reception Process State Transitions 



From State 



Stopped 



Running 



Running 



Running 



Event 



Start reception. 



SGEC tries to acquire a 
descriptor owned by the 
host. 



Stop reception. 



A memory or host bus 
parity error is encountered. 



lb State 



Running 



Suspended 



Stopped 



Stopped 



Action 



Receive polling begins from 
the last list position or from 
the the list head (if this is the 
first start command issued, 
or if the receive descriptor 
list address (NICSR3) was 
modified by the port driver). 

NICSRS<RU> is set when 
the last acquired descriptor 
buffer is consumed. The 
position in the list is 
retained. 

The reception process is 
stopped after the current 
frame (if any) is completely 
transferred to data buffer(s). 
The position in the list is 
retained. 

Reception is cut off and 
NICSR5<ME> is set. 



Running 


Reset. 


Stopped 


Reception is cut off. 


Suspended 


Receive poll demand 
or incoming frame and 
available descriptor. 


Running 


Receive polling resumes from 
the last list position or from 
the list liead (if NICSR3 was 
modified by the port driver). 


Suspended 


Stop reception. 


Stopped 


None. 


Suspended 


Reset. 


Stopped 


None. 



7.3.24 Transmission Process 

In the running state, the transmission process polls the transmit descriptor list for 
any frames to transmit. Frames are built and transmitted on the Ethiemet wire. After 
completing frame transmission (or giving up), status information is written to the TDESO 
words. When polling starts, it continues (in sequential or descriptor-chained order) 
until the SGEC encounters either a descriptor flagged as owned by the host, or an error 
condition. At this point, the transmission process is placed in the suspended state and 
NICSR5<TI> is set. 

NICSR5<TI> is also set after completing transmission of a frame that has TDES1<IC> 
set in its last descriptor. In this case, the transmission process remains in the running 
state. 

Frames may be data-chained and span several buffers. Frames must be delimited by 
TDES1<FS> and TDES1<LS> in the first and last descriptors, respectively, containing 
the frame. 

As the transmission process starts in the running state, it first expects to find a descriptor 
with TDES1<FS> set. Frame data transfer from the host bufTer to the internal FIFO is 
initiated. 
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At the same time, if the current frame had TDES1<LS> clear, the transmission process 
tries to acquire the next descriptor. The process expects either TDES1<FS> and 
TDES1<LS> to be clear (indicating an intermediary buffer), or TDES1<LS> to be set 
(indicating the end of the frame). After the last buffer of the frame is transmitted, the 
SGEC: 

• Writes back final status information to the TDESO word of the descriptor having 
TDES1<LS> set. 

• Optionally sets NICSR5<TI> if TDES1<IC> was set. 

• Repeats the process with the next descriptor(s). 

Actual frame transmission begins after at least 72 bytes have been transferred to 
the internal FITO, or a full frame is contained in the FIFO. Descriptors are released 
(TDES0<OW> bit cleared) as soon as the SGEC is through processing a descriptor. 

Suspended State 

Transmit polling suspends under the following conditions: 

• The SGEC reaches a descriptor with TDES0<OW> clear. To resume, the port driver 
must give descriptor ownership to the SGEC and issue a poll demand command. 

• The TDES1<FS> and TDES1<LS> are incorrectly paired or out of order. TDESO<LE> 
will be set. 

• A frame transmission is given up due to a locally induced error. The appropriate 
TDESO bit is set. 

The transmission process enters the suspended state and sets NICSR5<TI>. Status 
information is written to the TDESO word of the descriptor causing the suspension. In all 
the cases listed, the position in the transmit list is retained. The retained position is that 
of the descriptor following the last descriptor closed (set to host ownership) by the SGEC. 

NOTE 

The SGEC does not automatically poll the transmit descriptor list. The port 
driver must explicitly issue a transmit poll demand command after rectifying 
the suspension cause. 

Table 7-34 summarizes the transmission process state transitions: 
Table 7-34 Transmission Process State Transitions 



From State 



Event 



To State 



Action 



Stopped 



Start transmission. 



Running 



The SGEC tries to acquire a 
descriptor owned by the host. 



Running Transmit polling begins 

from the last list 
position or from the 
head of the list (if 
this is the first start 
command issued, or if 
the transmit descriptor 
list address (NICSR4) 
was modified by the 
port driver.) 

Suspended NICSR5<TI> is set. 

The position in the list 
is retained. 
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Table 7-34 (Com.) Transmission Process State Transitions 



From State 



Event 



To State 



Action 



Running 



Running 



Running 



Out-of-order delimiting flag Suspended 

(TDESO<FS> or TDESO<LS>) 

encountered. 

The frame transmission aborts Suspended 

due to a locally induced error. 



Stop transmission. Stopped 



TE>ESO<LE> and 
NICSR5<TI> are set. 
The position in the Ust 
is retained. 

Appropriate TDESO and 
NICSR5<TI> bits are 
set. The position in the 
list is retained. 

The transmission 
process is stopped 
after the current frame, 
if ]iny, is transmitted. 
The position in the list 
is retained. 



Running 


lYansmit watchdog expires. 


Stopped 


Transmission is cut ofT 
and NICSR5<TW> , 
TE>ES0<TO> are set. 
The position in the list 
is retained. 


Running 


Memory or host bus parity error 
encountered. 


Stopped 


Transmission is cut oif, 
and NICSR5<ME> is 

set. 


Running 


Reset. 


Stopped 


Transmission is cut oiT. 


Suspended 


T^nsmit poll demand. 


Running 


IViansmit polling 
resumes from last 
list position or from the 
Hsthead{ifNICSR4 
was modified by the 
port driver). 


Suspended 


Stop transmission. 


Stopped 


None. 


Suspended 


Reset. 


Stopped 


None. 



7.3.25 Loopback Operations 

The SGEC supports two loopback modes: 

• Intemal mode 

This mode is generally used to verify correct operations of the SGEC intemal logic. 
While in this mode, the SGEC takes frames from the transmit list and loops them 
back internally to the receive list. In this mode, the SGEC is disengaged from the 
Ethernet wire. 

• External loopback 

This mode is generally used to verify correct operations up to the Ethernet cable. 
In this mode, the SGEC takes frames from the transmit list and transmits them on 
the Ethernet wire. Concurrently, the SGEC listens to the line thtit carries its own 
transmissions and places incoming frames in the receive list. 
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NOTE 

Caution should be exercised in this mode, since transmitted frames a]*e 
placed on the Ethernet wire. Furthermore, the SGEC does not check the 
ori^n of any incoming frames, so frames not originating from the SGEC 
may make it to the receive buffers. 

In either of these modes, all address-filtering and validity-checking rules apply. The port 
driver needs to take the following actions: 

1. Place the reception and transmission processes in the stopped state. The port driver 
must wait for any previously scheduled frame activity to cease. This is done by 
polling the TS and RS fields in NICSR5. 

2. Prepare appropriate transmit and receive descriptor lists in host memory. These may 
follow the existing lists at the point of suspension, or may be new lists. New lists 
must be identified to the SGEC by appropriately writing NICSR3 and NICSR4. 

3. Write to NICSR6<0M> according to the desired loopback mode. Use start commands 
to place the transmission and reception processes in the running state. 

4. Respond and process any SGEC interrupts, as in normal processing. 

To restore normal operations, the port driver must execute step 1 above, then write the 
OM field in NICSR6 with 00. 

7.3.26 Support for DNA CSMA/CD Counters and Events 

Table 7-35 describes the SGEC features that support the port driver in implementing 
and reporting the specified counters and events. 



Table 7-35 CSMA/CD Counters 



Counter 



Time since counter creation 
Bytes received 

Bytes sent 

Frames received 

Frames sent 

Multicast bytes received 

Multicast frames received 
Frames sent, initially deferred 
Frames sent, single collision 



SGEC Feature 



Supported by the host driver. 

The port driver must add up the RDESO<FL> fields 
of all successfully received frames. 

The port driver must add up the TDES2<BS> fields 
of all successfully transmitted buffers. 

The port driver must count the successfully received 
frames in the receive descriptor list. 

The port driver must count the successfully 
transmitted frames in the transmit descriptor list. 

The port driver must add up the RDESO<FL> fields 
of all successfully received frames with multicast 
address destinations- 

The port driver must count the successfully received 
frames with multicast address destinations. 

The port driver must count the successfully 
transmitted frames with TDESO<DE> set. 

The port driver must count the successfully 
transmitted frames with TDESO<CC> equal to 
1. 
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Table 7-35 (Cont.) CSMA/CD Counters 



Counter 



SGEC Feature 



Frames sent, multiple collisions 

Send failure — excessive collisions 
Send failure — carrier check failed 
Send failure — short circuit 

Send failure — open circuit 

Send failure — remote failure to defer 

Receive failure — block check error 

Receive failure — ^framing error 

Receive failure — ^frame too long 

Unrecognized frame destination 
Data overrun 

System buifer unavailable 

User buffer unavailable 
Collision detect check failed 



The port driver must count the successfully 
transmitted frames with TDESO<CC> greater than 
1. 

The port driver must count the transmit descriptors 
having TDESO<EC> set. 

The port driver must count the transmit descriptors 
having TDESO<LC> set. 

Two successive transmit descriptors with the no 
carrier flag TDESO<NC> are set, indicating a short 
circuit. 

Two successive transmit descriptors with the 
excessive collisions flag TDESO<EC> are set 
with the same time domain reflectometer value 
TDESO<TDR>, indicating an op(5n circuit. 

Flagged as a late collision TDESO<LC> in the 
transmit descriptors. 

The port driver must count the receive descriptors 
having RDESO<CE> set with RDESO<DB> cleared. 

The port driver must count the receive descriptors 
having both RDESO<CE> and RDESO<DB> set. 

The port driver must count the receive descriptors 
having RDESO<TL> set. 

Not applicable. 

The port driver must count the receive descriptors 
having RDES0<OP> set. 

Reported in the Missed-frame counter 
NICSR10<MFC>. (See Table 7-17.) 

Not applicable. 

The port driver must count the transmit descriptors 
having TDESO<HF> set. 



CSMA/CD-specified events can be reported by the port driver based on the above table. 
The initialization failed event is reported through NICSR5<SF>. 

7.4 KA670 Mass Storage Interface 

The KA670 contains two DSSI bus interfaces that are implemented with the two single 
host adapter chips (SHACs). These interfaces allow the KA670 to transmit packets of 
data to, and receive packets of data from, up to 14 other DSSI devices (typically RF- 
type disk drives and TF-type streaming tape drives). The two DSSI buses are distinct 
from each other, with each supporting seven devices. The SHACs support CP bus parity 
protection. 
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7.4.1 SHAC Overview 



The single host adapter chip (SHAC) is a single-chip, VLSI version of Digital's 
systems communications architecture (SCA) port that uses a DSSI bus as the physical 
interconnect. Another SCA realization, CI, has defined a port-driver/port interface which 
has been used to connect VAX systems in clusters. DSSI has adopted the same interface, 
so the same VMS port driver can drive either a CI port or SHAC. The SHAC can be used 
to connect a host to any other device that can communicate through the CI-DSSI protocol. 
In particular, the SHAC provides a solution to the following problems: 

• Interfacing a group of mass storage device controllers (MSDCs) to a VAX 

• Interfacing several VAX systems to a common group of MSDCs and, if higher level 
protocols support this option, to one another 

Where two or more VAX systems connect to a group of MSDCs (or to one another) through 
DSSI, each has a SHAC or another DSSI port. When a group of MSDCs connect to the 
DSSI bus, the controllers provide both the bus interface and the intelligent control 
required to respond to the CI commands received over the DSSI. 

On the 1-byte wide DSSI bus, both the MSDCs and the several VAX systems 
communicate at high speed, with a 4 to 5 Mbyte/s burst transfer rate. The SHAC handles 
the problem of providing effective, efficient, and reliable interfacing between this DSSI 
bus and the CPU that has direct host memory access (DMA) over the host's 32-bit wide, 
16 Mbyte/s CP bus. All commimications between those connected to the DSSI will follow 
the CI protocol, with the DSSI protocols providing handshaking in the transactions. 

Structural parameters limit the number of possible combinations that can be realized 
with DSSI and SHAC. 

• A single DSSI bus has room for eight nodes, which may be partitioned among host 
adapters (for example, SHACs) and MSDCs. 

• Up to four SHACs can be installed on a single host bus. 

• Because there must be a host, there can be up to seven MSDCs on a single DSSI. 

The SHAC provides a small amount of buffering (1.2 kilobytes) on the chip to improve 
bus utilization on both sides, but SHAC is designed to pass data through from one bus 
to the other as rapidly as the two buses permit. DMA services to and from the main 
memory reside in the SHAC, which responds to requests for transfers between the host 
and the remote nodes. 

The SHAC is operated by an on-chip reduced intruction set chip (RISC) that obtains 
its code and internal data from on-chip RAM and ROM. The RAM is loaded from main 
memory, both during initialization and as circumstances reqxiire during normal runtime. 
This capability allows the RAM to read in new code and data from the main memory, 
so it can adapt its behavior to new circumstances. This feature permits inexpensive 
upgrades of SHACs after they are installed in the field. It also allow the SHAC to store 
infrequently accessed code in main memory, providing more capability than could be 
included in on-chip ROM. 

SCA Communications Architecture 

The SHAC works under Digital's systems communications architecture (SCA). This 
architecture defines four layers (Figure 7-28). The architecture can be realized in 
a variety of ways. Two realizations at the lowest two levels, in the diagram are the 
computer interconnect (CI) and Digital storage system interconnect (DSSI). They share 
the same lowest host layer (CI port driver), but have distinctly different physical 
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interconnects. The layers between the port driver and the DSSI bus can be realized 
at both the board and chip level, and products at both levels are in design within Digital. 

The SHAC is a chip-level product that connects the host bus to the DSSI bus. The SHAC 
is controlled by the CPU through a CI port driver, accepting and delivering Cl-defined 
packets over the DSSI bus. Layers above the port driver are invisible to SHAC. 

SCA 



3. I/O Applications 
(SYSAP) 


CI DSSI 




2. System Communications 
(SCS) 




1. Port/Port Driver 
(PDP) 


1b. CI Port Driver 


^J^ T* 


la. CI Port 


1a. DSSI Port 


H 
A 
C 


0. Physical Interconnect 

(PI) 


Ob. CI Data Link 


Ob. DSSI Data Link 


Oa. CI bus 


Oa. DSSI bus 





Figure 7-28 Relationship of the DSSI to SCA and CI 

The port driver maintains a set of seven queues in its system space. Four of these 
contain commands for the SHAC to execute. Command priority is determined by the 
queue a command is on; order is determined by the position in the queue. Another queue 
contains all of the responses for the host (from the SHAC or the remote nodes). Finally, 
there are two queues of empty envelopes for use by the host and SHAC, to stuff with 
commands and responses and then queue on the other queues. 

These envelopes are simply standard-sized queuable blocks of host memory. All 
commands and responses are copied into one of these standard-sized blocks. The header 
on each block includes a pair of queue pointers (for a doubly linked queue) and various 
standard identifiers that specify the contents of the block and how much of the block 
represents the actual command or response. To be visible, a block must be on a queue 
where pointers from other elements or the queue header show its presence. After a block 
is removed from a queue, the block is visible only to the entity that removed it. 

The SHAC's principal task is in accepting and delivering "mail" to other nodes. 
Externally (for example, on DSSI) the SHAC deals only in standard CI formats. 
Internally, the SHAC deals with the envelopes just described and with blocks of data. 
Because DSSI deals with bytes and the CP bus deals in longwords, the SHAC must 
frequently do byte-alignment tasks during transcription. 

The SHAC deals with the port driver in the virtual address mode, unloading from the 
CPU the obligation to do virtual-to-physical address translation and to be aware of page 
crossings in virtually-contiguous blocks of information. The SHAC supports full virtual 
address translation, including the use of global I/O pages (to a depth of 1). 

The following section describes a typical set of steps that the SHAC goes through in 
serving its role as the CI port, with mail in both directions. 
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7.4.2 Ci-DSSI Ovef-view 



At start-up, the host provides the SHAC with a number of pointers to internal host 
structures. One of these structures is the port queue block (PQB), which contains 
pointers and data on all the queues that the host maintains for CI. The SHAC uses 
this data to carry on its normal business in the following way. 

If traffic is not coming in on the DSSI bus, SHAC goes to the highest command queue 
that has something enqueued. Choices are CMDQO to CMDQ3, with 3 being most urgent. 
SHAC dequeues an entry from the queue and examines the entry's header to see what 
it must do with the entry. The entry could be a command for the SHAC or an item to 
be delivered to one of the nodes on the DSSI. A command might be an order to deliver a 
block of data to a remote node. A deleivery item could be a datagram or a message. 

A datagram is a one-sided communication — one which is sent without any assurance of 
either receipt or reply. One obvious application for a datagram is a request for the party 
at the other node to identify itself If the host does not know if anything at all is out 
there, it must transmit its request without expectation. For this or any similar purpose, 
the host uses a datagram. All datagrams are of a length guaranteed to fit in a datagram 
envelope. 

A message is a two-sided communication used when a virtual circuit (an established 
formal relationship) between members of the bus exists. After a virtual circuit is 
established, the host(s) understand how to make requests of the other side. Such a 
request could be an order for a data transfer in either direction. The message itself (moye 
data) is contained in a command (deliver this message to ...). All messages are of a length 
guaranteed to fit in a message envelope. 

Messages are always delivered sequentially to a given node — that is, in the order in 
which they were enqueued on a particular queue. The SHAC supports retries if a 
message fails to get through. If the command is not delivered before the retry limit is 
reached, the SHAC returns the command to the host, marking it as undeliverable; then 
the SHAC breaks the virtual circuit to that node. 

Sample Transaction 

A full transaction might go something like this: 

1. The host queues a message for node 3 (for example, a disk controller) to copy a block 
of 16 kilobytes from host memory, starting at location X and to be stored in location 
Y on disk. The queues are doubly linked, so at the top of every envelope there is a 
forward link FLINK and a backward link BLINK. Enqueuing involves 

• Putting link values into the new element's FLINK and BLINK 

• Making the last previous element's FLINK and the queue header's BLINK point 
to the new element. 

2. When this message gets to the head of the queue, the SHAC dequeues it * , reads the 
header and finds that it should dial up node 3. To do this, the SHAC goes through the 
DSSI protocols, contending for the DSSI bus. If successful in obtaining the bus, the 
SHAC specifies node 3 as the target. These steps are called arbitration and selection. 



Note that the SHAC ends up holding the only pointer to the dequeued block of memory that 
constitutes the queue element. The port driver no longer knows where the element is. 
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3. Node 3 responds by asking for the DSSI command {command-out phase). In 
this phase, the SHAG tells node 3 how many bytes are coming and repeats the 
identification information to confirm a proper selection. Node 3 then tells the SHAG 
to switch to the data-out phase. The SHAG sends a pair of GI header bytes to identify 
the type of message, then transmits the actual message read from; the message block 
in host memory. 

The step-by-step details of the transfer are handled by hardware in the SHAG that 
permits simultaneous, buffered reading and writing on the two buses connected to 
the SHAG. After the transmission is successfully completed, node 3 responds with a 
l-b5rte acknowledgment of success (parity and checksum proper, and no other errors). 

4. The SHAG is still holding the only pointer to the message block in host memory. The 
SHAG returns this to the host in one of two ways. 

• If the host has requested a return receipt, the SHAG puts the block on the 
response queue RSPQ to indicate proper delivery. This is where the port driver 
software in the host will look for responses. 

• Alternatively, the SHAG simply puts the block back on the MFREEQ that holds 
the standard envelopes for messages. At this point, the single message has been 
delivered, and the message envelope is back in circulation. 

5. Node 3 processes the message, then contends for the bus. After obtaining the bus, 
the node selects the SHAG as its target. The node then sends a standard GI message 
as above, telling the SHAG to transmit the required data. 

In general, the SHAG does not send the data immediately, because it is obliged to 
handle traffic according to position in the queue and according to queue priority. 
Instead, the SHAG takes an empty envelope from MFREEQ, writes the message into 
the envelope, and puts the envelope on the proper GMDQ as specified in the message 
it just received. 

6. When that message gets to the head of its queue, the SHAG dequeues it again and 
carries out the command, possibly interleaving other transmissions of higher priority 
to this node or any priority to other nodes, until the last bj^ is sent. The SHAG 
uses transmissions of 4 kilobjdies whenever possible. A 4-kilobyte transmission takes 
about 1 ms on the DSSI bus. After the SHAG has completed this operation, it returns 
the message block to the MFREEQ. 

7. Node 3 has put its data on the disk and must report to the host the successful 
completion of the transaction. The node again contends for the bus and upon 
obtaining it specifies the SHAG as its target. Then the node sends a message to 
the port driver through the SHAG, confirming the successful transaction. The SHAG 
dequeues another free envelope and writes this message into that block. Then the 
SHAG queues the envelope on the host's RSPQ. Except for higher level responses in 
the host, that concludes a whole transaction. 

The enqueue/dequeue operations represent a considerable part of the effort in delivering 
a message or datagram. To minimize this effort, the SHAG caches a small number of the 
envelopes (that is, it hangs onto the pointers to the memory blocks) as they become free 
in its normal activity. The SHAG only fetches an envelope from the free queues when its 
own supply is gone, and it only returns them to the free queues when it has a full supply 
(four of a type). By this and other efforts at traffic conservation, the SHAG attempts to 
optimize its rate of doing useful work. 
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7.4.3 SHAC Registers 

The P-chip communicates directly with the two SHACs through a set of device registers 
in each of the SHACs. For each SHAC, these registers occupy a 1-page (512-byte) region 
in I/O address space, aHgned on a page boundary. 

All of the registers are longword registers. They may be accessed only through longword 
operations. 

In addition to the access restrictions listed for specific registers, no register other than 
the SHAC software chip reset (SSWCR) register may be read or written while certain 
chip intialization functions are being executed. The results of such an access during the 
100 milliseconds following a reset (power-up or a write to SSWCR), or during the 50 
microseconds following a MIN-bit (PMCSR<0>) reset are unpredictable. 

The registers can be divided into two categories: 

• The CI port registers 

• The SHAC-specific registers 

Conventions Used in This Section 

The KA670 has two SHACs, one for the internal DSSI bus and one for the external DSSI. 
The internal bus is the bus brought out through the backplane connector. The external 
bus is the bus brought out through the console module. 

For simplicity, the following sections provide a single description of each register for both 
SHACs, with I/O addresses given for each SHAC. In these sections: 

• SHACl is the SHAC controUing the internal DSSI bus. 

SHACl registers fall in the I/O addresses range of 2000 4000 to 2000 41FFi6 

• SHAC2 is the SHAC controlling the external DSSI bus. 
SHAC2 registers fall in the range of 2000 4200 to 2000 43FFi6. 

7.4.3.1 CI Port Registers 

The following registers are based on the CI port architecture. 

7.4.3.1.1 Port Queue Block Base Register (PQBBR) 

The port queue block base register (PQBBR) contains the uppermost bits of the physical 
address for the base of the port queue block (PQB). After a reset, the PQBBR is loaded by 
the SHAC with configuration information. This information remains in the PQBBR until 
the PQBBR is written with the address of the port queue block. Figure 7-29 shows the 
format of the register. Table 7-36 lists the bit descriptions. 

PQBBR is writable only when the port is in the disabled or disabled/maintenance state. 
The register is readable anytime except during chip intialization. 



3 2 
1 1 


2 




MBZ 


PQB Base <29:9> 



SHAC1 I/O Address: 2000 4048 
SHAC2 I/O Address: 2000 4248 
Longword Read/Write Access. 



Figure 7-29 Port Queue Block Base Register (PQBBR) 
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Table 7-36 Port Queue Block Base Address Register (PQBBR) Bits 



Data Bit 



Name 



Description 



<31:21> MBZ Read as 0. Must be written as 0. 

<20:0> PQB base This field contains the uppermost bits of the physical address for 

<29:9> the base of the port queue block (PQB). Note, the PQB must be 

page-aligned, so the remaining bits of the address are assumed to 
beO. 

Following a chip reset, PQBBR contains the configuration shown in ilgure 7-30. 
Table 7-37 lists the bit descriptions. 



2 2 
4 3 



1 1 
6 5 



8 7 



HW Version 



FW Version 



SHM Version 



Maint. ID 



Figure 7-30 Port Queue Blocli Base Register (PQBBR) After Reset 
Table 7-37 Port Queue BLock Base Address Register Bits 



Data Bit Name 



Description 



<31:24> HW version 

<23:16> FW version. 

<15:8> SHW Version 



<7:0> 



Maint. ID 



This field contains the SHAC's hardware version, which is greater 
than 0. 

This field contains the SHAC's firmware version, which is greater 
than 0. 

This field contains the SHAC's shared host memory version. This 
value is until the shared host memory data area has been read 
in; thereafter, the value is greater than 0. 

This field contains the CI port maintenance ID, which should 
always be 22]6. 



7.4.3.1.2 Port Status Register (PSR) 

The port status register (PSR) contains a status report. If interrupts are enabled (for 
example, (PMCSR<2>) set), the port interrupts the CPU each time tiiat it writes to 
this register. After an interrupt is requested by the port, the value of PSR is fixed does 
not change vmtil the CPU releases it by writing the port status release control register 
(PSRCR). Figure 7-31 shows the format of the port status register. Table 7-38 lists the 
bit descriptions. 

The PSR register is read-only and may be read anytime by the port driver, except during 
chip initiaUzation. The value of PSR following a write to it is unpredictable. 
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SHAC1 I/O Address: 2000 404C 
SHAC2 I/O Address: 2000 424C 

Longword Read-Only Access. 



Figure 7-31 Port Status Register (PSR) Bits 



Table 7-38 Port Status Register Bits 



Data Bit Name 



Description 



<31> 



ME 



<30:22> 
<21> 



<20> 



<19> 



<18> 



MBZ 
II 



QDE 



DE 



ISN 



Maintenance error. When set, the port has detected an 
implementation-specific error (or hardware status condition). 
The source of the error may be more accurately determined from 
the other bits in the upper word of this register (PSR) and the 
contents of other registers. When this bit is set, the port is in the 
uninitialized state (not functional). Maintenance errors normally 
indicate a severe SHAC hardware or software failure. 

Read as 0. Writes have no effect. 

Illegal interrupt. When set, this bit indicates a SHAC internal 
error, detected when the SHAC's microprocessor received an 
interrupt from a invalid source. This causes ME (PSR<31>) to set 
and the port to enter the uninitialized state (not functional). 

QUIP-detectcd error. When set, this bit indicates a SHAC internal 
error detected when the SHAC's microprocessor (QUIP) was given 
an invalid instruction. This causes ME (PSR<31>) to set and the 
port to enter the uninitialized state (not functional). 

Diagnostic error. When this bit is set, an error was detected while 
the SHAC was running its internal self-test. This causes ME 
(PSR<31>) to set and the port to enter the uninitialized state (not 
functional). 

niegal segment number. When set, this bit this indicates a SHAC 
internal error in which the SHAC attempted to load a nonexistent 
external segment from the SHAC shared host memory. This 
causes ME (PSR<31>) to set and the port to enter <ihe uninitialized 
state (not functional). 
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Table 7-38 (Com.) Port Status Register Bits 

Data Bit Name Description 



<17> 



<16> 



<15:8> 

<7> 



<6> 



<5> 



<4> 



SMPE 



SHME 



MBZ 
MISC 



ME 



MSE 



DSE 



<3> 

<2> 

<1> 

<0> 



PIC 

PDC 

MFQE 

RQA 



Slave mode parity error. This bit is set by the occurrence of a 
parity error during a CPU access of a SHAG device register. This 
causes ME (PSR<31>) to set and the port to enter the uniniiialized 
state (not functional). 

Share host memory error. This bit is set by the occurrence of an 
error involving the SHAC shared host memory. This causes ME 
(PSR<31>) to set and the port to enter the uninitialized state (not 
functional). 

Read as 0. Writes have no effect. 

Miscellaneous. When set, this bit indicates that the port microcode 
has detected one of the miscellaneous errors, and the port is about 
to enter the disabled I maintenance state. The actual error code is 
stored in the port error status register. 

Maintenance timer expiration. When this bit is set, 
the maintenance timer has expired. The port is in the 
uninitialized I maintenance state. 

Memory system error. When this bit is set, the port has 
encountered an uncorrectable data or nonexistent memory 
error in referencing memory. The port is in the disabled or 
disabled I maintenance state. See Section 7.4.3.1.4 for more 
information. 

Data structure error. When this bit is set, the port has 
encountered an error in a port data structure (for example, queue 
entry, PQB, BDT, or page table). The port is in the disabled or 
disabled /maintenance state. See Sections 7.4.3.1.3 and 7.4.3.1.4for 
more information. Note that errors in queue structures leave the 
queues locked. 

port initializtion complete. When this bit is set, the port has 
completed internal initiahzation. The port is in the disabled or 
disabled / maintenance state. 

Port disable complete. When this bit is set, the port is in the 
disabled or disabled /maintenance state. 

Message free queue is empty. When set, this: bit indicates the port 
tried to remove an entry from the Message Free Queue (MFREEQ) 
and found the queue empty. The port can continue to process 
commands, so the MFREEQ may not be empty at the time the 
port driver gets control. 

Response queue available. When set, this bit indicates the port 
has inserted an entry on an empty response queue. 



7.4.3.1.3 Port Error Status Register (PESR) 

The port error status register (PESR) indicates the type of error that caused a port status 
register error of DSE (PSR<4>) or an MISC (PSR<7>) error. Figure 7-32 shows the 
format of the PESR register. Table 7-39 lists the bit descriptions. 

PESR is read only by the CPU. The register is valid only after a DSE or MISC error, or 
after certain ME (PSR<31>) and DE (PSR<19>) errors. The register's value at any other 
time, including after a write to it, is unpredictable. 
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1 1 

6 5 



1 MEC 


DEC j 



SHAC1 I/O Address: 2000 4050 
SHAC2 I/O Address; 2000 4250 
Longword Read-Only Access 



Figure 7-32 Port Error Status Register (PESR) Bits 
Table 7-39 Port Error Status Register (PESR) Bits 



Data Bit Name 



Description 



<31:16> 



<15:0> 



MEC 



DEC 



Miscellaneous error code. This code comprises two fields: bits 
<31:24> define the module within the SHAG code where the error 
occurred, and bits <23:16> contain the specific error that occurred. 
These codes are implementation-specific. 

Data structure error code. 



7.4.3.1.4 Port Falling Address Register (PFAR) 

The port failing address register (PFAR) contains the memory address where one of the 
following failures occurred: a DSE, MSE, ME, or DE error (as indicated by PSR), or afler 
a response with buffer memory system error status. The address may be 

• The exact failing address 

• An address in the same page as the exact failing address 

• An address in some part of the data structure (for a DSE error) 

For a DSE error, PFAR contains a virtual address or offset. For MSE interrupts and 
buffer memory system errors, the PFAR contains a physical address. For ME errors, the 
interpretation of the address is error-dependent. 

Because the port continues command execution and packet processing after buffer 
memory system errors, the PFAR is overwritten if subsequent errors occur. For DSE, 
MSE, and ME errors, the PFAR is effectively fixed because the port enters the disabled, 
disabled /maintenance, or uninitialized state. 

Figure 7-33 shows the format for the port failing address register. 

PFAR is read only by the CPU. The register is readable after a DSE, MSE, ME, or DE 
error; or after a response with buffer memory system error status. At any other time, 
including after a write to the register, the value is unpredictable. 

3 

1 



Falling Address 



SHAC1 I/O Address: 2000 4054 
SHAC2 I/O Address: 2000 4254 
Longword Read-Only Access 



Figure 7-33 Port Failing Address Register (PFAR) 
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7.4.3.1.5 Port Parameter Register (PPR) 

The port parameter register (PPR) contains port implementation parameters and the 
port number. The value of the PPR is set by the port during initialization and valid after 
a PIC (PSR <3>) interrupt. The PPR value at any other time, including after a to it, 
is unpredictable. PPR is read only by the CPU. Figure 7-34 shows the format of the 
register. Table 7-40 lists the bit descriptions. 



3 2 
1 9 


2 1 
8 6 


1 
5 


1 

4 8 


7 


Icsz 


IBUF_LEN 





ISDI 


PORT_NO 



SHAC1 I/O Address: 2000 4058 
SHAC2 I/O Address: 2000 4258 
Longword Read-Only Access 



Figure 7-34 Port Parameter Register (PPR) 
Table 7-40 Port Parameter Register (PPR) Bits 



Data Bit 



Name 



Description 



<31:29> CSZ Cluster size. For SHAC, this value is always 0, indicating a 

maximum of 16 ports on the DSSI bus. Note that the DSSI 
architecture only allows 8 ports on the bus, but 16 is the smallest 
size defined for the CSZ field. 

<28:16> IBUF_LEN Internal buffer length. This field indicates the size of internal 

buffers available for message and data transfers. Maximum data 
packet = IBUF_LEN - 16 bytes. Maximum message or datagram 
length = IBUFJLEN. For SHAC, the value is 4112 lOlOie. 

<15> MBZ Read as 0, writes have an unpredictable efTect. 

<14:8> ISDI Implementation-specific diagnostic information. The bits in 

this field contain information about the local adapter's link layer 
configuration. For SHAC, the definitions of these bits are read as 
0. 

<7:0> Port NO Port number. This is the same as the SHAC'a DSSI ID. 



7.4.3.1.6 Port Control Registers 

The port control registers are 32-bit registers which are write-only by the CPU. lb invoke 
the function provided by any of the control registers, the CPU writes a 1 to the register. 

The result of writing any other value to any of these registers is unpredictable. The value 
read from any of t^em is also unpredictable. Figure 7-35 shows the format of the port 
control registers. 



1 



MBZ 



L 



MBO 



Longword Write-Only Access 



Figure 7-35 Port Control Registers 
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7.4.3.1.6.1 Port Command Queue Control Register (PCQOCR) 

When the port driver inserts an entry in an empty CMDQO, the port driver writes 
PCQOCR to initiate port execution of the command queue. PCQOCR can be written 
only when the port is in the enabled or enabled /maintenance state. Writing to PCQOCR 
when the port is in any other state has no effect. 

SHACl I/O Address: 2000 4080i6 
SHAC2 I/O Address: 2000 4280i6 

7.4.3.1.6.2 Port Command Queue 1 Control Register (PCQ1CR) 

This register is the same as the PCQOCR register, but refers to CMDQl. 

SHACl I/O Address: 2000 4084ie 
SHAC2 I/O Address: is 2000 4284 ig 

7.4.3.1.6.3 Port Command Queue 2 Control Register (PCQ2CR) 

This register is the same as PCQOCR, but refers to CMDQ2. 

SHACl I/O Address: 2000 4088i6 
SHAC2 I/O Address: 2000 4288i6 

7.4.3.1.6.4 Port Command Queue 3 Control Register (PCQ3CR) 

This register is the same as PCQOCR, but refers to CMDQ3. 

SHACl I/O Address: is 2000 408Ci6 
SHAC2 I/O Address: is 2000 428Ci6 

7.4.3.1.6.5 Port Datagram Free Queue Control Register (PDFQCR) 

If the port driver inserts an entry on the DFREEQ when it is empty, the port driver 
writes the PDFQCR register to indicate the availability of DFREEQ entries. PDFQCR 
can be written only if the port is in the enabled or enabled /maintenance State. Writing 
to PDFQCR when the port is in any other state has no effect. 

SHACl I/O Address: is 2000 4090i6 
SHAC2 I/O Address: is 2000 4290i6 

7.4.3.1.6.6 Port Message Free Queue Control Register (PMFQCR) 

This register is the same as PDFQCR, but refers to MFREEQ. 

SHACl I/O Address: 2000 4094i6 
SHAC2 I/O Address: 2000 4294i6 

7.4.3.1.6.7 Port Status Release Control Register (PSRCR) 

After the port driver has received an interrupt and read the PSR register, it returns the 
PSR to the port by writing the port status release control register (PSRCR). 

SHACl I/O Address: 2000 4098i6 
SHAC2 I/O Address: 2000 4298i6 

7.4.3.1.6.8 Port Enable Control Register (PECR) 

The port driver enables the port by writing the port enable control register (PECR). 
PECR is ignored if the port is in the uninitialized , uninitialized /maintenance , enabled , 
or enabled /maintenance state. 

SHACl I/O Address: 2000 409Ci6 
SHAC2 I/O Address: 2000 429Ci6 
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7.4.3.1.6.9 Port Disable dontrol Register (PDCR) 

The port driver disables the port by writing the poprt disable control register (PDCR). 
When disabled, the port sets PDC (PSR <2>) and requests an interrupt, if interrupts are 
enabled. PDCR is ignored if the port is in the uninitialized, uninitialized /maintenance, 
disabled, or disabled /maintenance state. 

SHACl I/O Address: 2000 40A0i6 
SHAC2 I/O Address: 2000 42A0i6 

7.4.3.1.6.10 Port Initialize Control Register (PICR) 

The port driver initializes the port by writing the port initialize control register (PICR). 
When the initialization is complete, the port sets PDC (PSR <2>) and requests an 
interrupt, if interrupts are enabled. As part of the initialization, the maintenance timer 
is set to expire in 100 seconds. 

SHACl I/O Address: 2000 40A4i6 
SHAC2 I/O Address: 2000 42A4i6 

7.4.3.1.6.11 Port Maintenance Timer Control Register (PMTCR) 

The port driver forces the maintenance timer to reset its expiration time by writing the 
port maintenance timer control register (PMTCR). If the PMTCR is not written again 
before the expiration time, the port enters the uninitialized /maintenance state, setting 
MTE (PSR <6>) and requesting an interrupt if interrupts are enabled. PMTCR is ignored 
if the maintenance timer is not rimning. 

SHACl I/O Address: 2000 40A8i6 
SHAC2 I/O Address: 2000 42A8i6 

7.4.3.1.6.12 Port Maintenance Timer Expiration Control Register (PMTECR) 

The port driver forces a maintenance timer expiration interrupt by writing the port 
maintenance timer expiration control register (PMTECR). This register may be 
written only while the maintenance timer is enabled and the port is in the enabled, 
enabled /maintenance, disabled, or disabled /maintenance state. 

SHACl yO Address: is 2000 40ACi6 
SHAC2 I/O Address: is 2000 42ACi6 

7.4.3.1.7 Port Maintenance Control and Status Register (PMCSR) 

The port maintenance control and status register (PMCSR) is for maintenance-level 
control and status reporting. The CI port architecture defines all but ihe two least 
significant bits. Figure 7-36 shows the format of the PMCSR register. Table 7—41 lists 
the bit descriptions. 

The bits can be divided into two categories: 

* Status bits — ^The port sets these bits to report various conditions. They are cleared by 
maintenance initialization or clearing the condition in another rtsgister. PMCSR does 
not include any status bits at this time. 

• Function control bits — ^These bits are read and written by the port driver only. They 
are cleared by a reset. 

There are two types of function control bits: 

- Init — This type of bit invokes a function (for example, initialization) l^ setting it. 
The bit always reads as 0, except while the function is active. 
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- Enable/disable^This type of bit causes an activity or state to exist while the bit 
is set. Clearing the bit stops the activity or changes the state. The bit always 
reads the most recently written value. The bit is never changed by the port. 
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SHAC1 I/O Address: 2000 405C 
SHAC2 I/O Address: 2000 425C 
Longword Read/Write Access 



Figure 7-36 Port Maintenance Control and Status Register (PMCSR) 
Table 7-41 Port Maintenance Control and Status Register (PMCSR) Bits 



Data Bit Name 



Description 



<31:5> 


Reserved 


<4> 


HAC 


<3> 


SIMP 



<2> 



<1> 



<0> 



IE 



MTD 



MIN 



These reserved bits should not be written. Reads return 
unpredictable results. 

Host access feature. This bit must be 0, except for diagnostic 
purposes. This is an enable/disable class control bit. 

Simple SHAC mode. This bit must be 0, except for diagnostic 
purposes. This is an enable/disable class control bit. 

Interrupt enable. When this bit is set, interrupts from the port to 
the CPU are enabled. The power-up state is cleared (interrupts 
disabled). This is an enable/disable class control bit. 

Maintenance timer disable. This bit is read and written by CPU. 
If the bit is set, the maintenance timer is turned off. The timer is 
set to the initial value and suspended. If the bit is clear, the timer 
works normally. The power-up state is cleared (timer enabled). 
This is an enable/disable class control bit. 

Maintenance init. Writing a 1 to this bit resets the port. Upon 
completion, the port is in the uninitialized state and the MIN bit 
is clear. Writing a to this bit has no effect. It always reads as 0, 
except while the reset function is active. 

Although MIN resets the port, this action is is not equivalent to a 
write to the SHAC software chip reset register. In particular, MIN 
does not reset the SHAC shared host memory address. 



7.4.3^ SHAC-Specific Registers 

The following registers are used for additional maintenance level control. They are not 
defined in the CI port architecture. 
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7.4.3^.1 SHAC Software Chip Reset (SSWCR) 

When the CPU writes FFFF FFFFie to the SHAC software chip reset (SSWCR) register, 
a chip reset is performed. The result is equivalent to that of the hardware chip reset 
following system power-up. On completion, all device registers are res<;t to their power- 
up state, and the port is in the uninitialized state. Figure 7-37 shows the format of the 
SSWCR register. 

SSWCR is write only by the CPU and may be written to at any time. The register's value 
when read is unpredictable. If anything other than FFFF FFFFie is written to SSWCR, 
the result is undefined. 



Must Be One 



SHAC1 I/O Address: 2000 4030 
SHAC2 I/O Address: 2000 4230 
Longword Write-Ortly Access 



Figure 7-37 SHAC Sottware Chip Reset (SSWCR) 

7.4.3.2.2 SHAC Shared Host Memory Address (SSHMA) 

Following a chip reset, the CPU writes the physical address of the shared host memory 
header into the SHAC shared memory address register (SSHMA). The area must be 
octaword-aligned and contiguous in physical memory. 

SSHMA is read and written by the CPU, but may be written only when the port is 
in the uninitialized state. Writing when the port is in any other state can produce 
unpredictable results. 

Figure 7-38 shows the format for the SHAC shared host memory address. 



3 3 2 
1 9 
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MBZ 



SSHMA<2g:4> 



MBZ 



SHAC1 I/O Address: 2000 4044 

SHAC2 I/O Address: 2000 4244 

Longword Read/Write Access 



Figure 7-38 SHAC Shared Host Memory Address (SSHMA) 
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KA670 Error Handling 



This chapter describes unexpected KA670 system error exceptions and interrupts, as 
seen from the macrocoder's point of view. The chapter is organized with respect to the 
system control block (SCB) entry points— vectors pointing to service routines. All error 
notifications pass thorugh these entry points. 

The chapter describes several primary SCB entry points in detail, in order to 
explain KA670-specific information. This information can help the operating system 
interface macrocode programmer determine exact errors, console HALT codes, or 
interrupt/exceptions. 

Table 8-1 lists the CPU's internally generated SCB entry points and highlights the 
specific points covered in this chapter. The chapter also offers recommendations from 
the module and chip designers for error recovery strategies. Section 3.1.6 describes 
exceptions and interrupts that are a result of normal system operation. 

The chapter provides information on: 

• How to discern what error(s) happened, given the SCB point through which the error 
was dispatched 

• What parameters are pushed on the stack 

• What the failure codes are for halt and machine check 

• What information exists for each error 

• How to clean up the error after determining its cause 

• How to restore the state of the machine, and what level of recovery is possible 
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Table 8-1 CPU Internally Generated SCB Entry Points 



Mnemonic 



SCB Index 



Description 



SCB.MACHCHK * 


004,6 


Machine check 


SCB_KSNV • 


008 


Kernel stack not valid 


SCB_PWRFL • 


OOC 


Power fail 


SCB_RESPRIV 


010 


Reserved/privileged instruction 


SCB_XFC 


014 


XFC instruction 


SCB_RESOP 


018 


Reserved operand 


SCB_RESADD 


OIC 


Reserved addressing mode 


SCB_ACV 


020 


Access control violation 


SCB.TNV 


024 


Translation not valid 


SCB_TP 


028 


Trace pending 


SCB.BPT 


02C 


Breakpoint trace fault 


SCB_ARITH 


034 


Arithmetic fault 


SCB.CHMK 


040 


Change mode to kernel 


SCB.CHME 


044 


Change mode to executive 


SCB.CHMS 


048 


Change mode to supervisor 


SCB_CHMU 


04C 


Change mode to user 


SCB_SMERR • 


054 


Soft error interrupt 


SCB HMERR ' 


060 


Hard error interrupt 


SCB.IPLSOFT 


080-OBC 


Software interrupt levels 


SCB_INTTIM 


OCO 


Interval timer interrupt 


SCB.EMULATE 


0C8 


Emulated instruction trap (PSL<PPD>=0) 


SCB_EMULFPD 


OCC 


Emulated instruction fault (PSL<FPD>=1) 



•This entry-point vector is described in detail in this chapter. 



8.1 Error Handling>-SCB Entry Points 

This section provides an overview of the entry points for all levels of hardware-detected 
errors, in the order of their severity. Following sections provide details on each error 
type. 

• Console error halt — ^A halt to console mode is caused by one of several errors such 
as interrupt stack not valid (Table 8-2). For certain halt conditions, the console 
prompts for a command and waits for operator input. For other halt conditions, the 
console may try to restart or bootstrap the system, as defined by the VAX Architecture 
Manual. 

• Blachine check — ^A hardware error occurred synchronously withi the CPU execution 
of instructions. Instruction-level recovery and retry may be possible. 

• Power fail — ^The power supply deasserted the power OK module signal. Software 
has 20 milliseconds to save processor state. 

• Hard error interrupt — A hardware error occurred asynchronously with the 
CPU execution of instructions. Usually, this means data was lost or the state was 
corrupted, so instruction-level recovery is not possible. 

• Soft error interrupt — ^A hardware error occurred that was not fatal to the process 
or system. System error software should be able to recover and continue. 



KA670 Error Handling 215 



• I/O device interrupt— An error occurred while an I/O device was performing DMA 
to or from main memory. There are other causes for these interrupts. Therefore, 
an I/O device interrupt does not necessarily mean that a hardware error occurred. 
System error software should be able to recover and continue. 

• Kernel stack not valid — During exception processing, a memory management 
exception was encountered while trying to push information on the kernel stack. 

8.1 .1 Error Categories for SCB Entry Points 

Table 8-2 lists the various categories of errors, organized by SCB entry point. The section 
also describes the basic steps in error handhngs and recovery. Separate sections provide 
details on how to distinguish errors within each category. 

Table 8-2 Error Summary Based on SCB Entry Points 



SCB 

Index 



Entry Point 



04 



Error Categories 



Console halt Interrupt stack not valid 

Kernel -mode halt 
Double errors 
Illegal SCB vector 

Machine check Floating point processor-related errors 

Memory management errors 
Microcode/CPU errors 
Primary cache read errors 

• Tag parity errors (D-stream only) 

• parity errors (D-stream only) 
Backup cache read errors 

• Data parity errors 
Main memory read errors 

• RDAL data parity errors (on nonmasked bytes) 

• Uncorrectable memory errors (D-stream only) 

• Main memory NXM 
I/O read errors 

• CP bus data parity errors 

• CP bus NXM/timeouts (D-stream only) 

• Q22-bus NXM/NOSACK errors 

• Q22-bus NOGRANT errors 

• Q22-bus device parity errors 



OC 



Power fail 
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Table 8-2 (Cont.) Error Summary Based on SCB Entry Points 



SCB 
Index 



Entry Point 



Error Categories 



54 



Soft error 
interrupt 



60 



Hard error 
interrupt 



08 



Kernel stack not 
valid 



Primary cache read errors 

• 1^ parity errors (I-stream only) 

• Data parity errors (I-stream only) 
Primary cache write errors 

• Tkg parity errors 
Backup cache read errors 

• "feg parity errors 
Main memory read errors 

• RDAL data parity errors (on masked by1»s or I-stream) 

• Correctable main memory errors 

• Uncorrectable main memory errors (I-stiream only) 
Main memory write errors 

• Correctable main memory errors 
I/O write errors 

• CP bus NXM/timeouts (I-stream only) 

Main memory write errors 

• RDAL data parity errors 

• Main memory NXM 

• Uncorrectable main memory errors (matiked writes only) 
I/O write errors 

• CP bus NXM/timeouts 

• Q22-bus NXM/NOSACK errors 

• Q22-bus NOGRANT errors 



8.1.2 Macrocode Error Handling and Recovery 

This section covers the basic steps in error handling and recovery. All errors (except 
those leading to a console halt) go through SCB vector entry points and are handled by 
service routines provided by the operating system. A console halt transfers macrocode 
execution control directly to the console firmware code. 

Error handling and recovery can be divided into the following steps: 

• State collection 
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• Analysis 

• Recovery 

• Retry 

8.1.2.1 Error State Collection 

Before error analysis can begin, all relevant states must be collected. The stack frame 

provides the program counter/program status longword (PC/PSL) pair for all exceptions 

and interrupts. For machine checks, the stack frame also provides details about the 

error. 

In addition to the stack frame, machine checks and hard and soft error interrupts usually 

require analysis of other registers. In these cases, it is strongly suggested that all of the 

following states be read and saved: 

PCSTS Primary cache status register 

PCERR Primary cache error address register 

BCSTS C-chip status register 

BCCTL C-chip control register 

BCERR C-chip error address register 

MEMCSR32 G-chip system error status register 

MEMCSR33 G-chip memory error address register 

MEMCSR34 G-chip I 

MEMCSR35 G-chip CP bus error address register 

DSER CQBIC DMA system error register 

QBEAR CQBIC Q22-bus error address register 

DEAR CQBIC DMA error address register 

SGEC CSR5 SGEC status register 

PSR SHAC(s) port status register 

PESR SHAC(s) error status register 

PFARS SHAC(s) port falling address register 

SSCBTR SSC bus timeout register 

For the purposes of the following discussion, assume that each of these registers is saved 
in a variable whose name is constructed by prefixing "s_" to the register name. For 
example, the BCERR register would be saved in the variable s_bcerr. 

8.1.2^ Error Analysis 

After obtaining the error state in the collection process, the error condition can be 
analyzed. Analysis of machine checks and hard and soft error interrupts should be 
guided by the parse trees shown in the appropriate sections. 

NOTE , ^ 1. . Ill 

If an errors is detected in or by one of the two caches, the cache is usuaUy 
disabled automatically. However, to minimize the possibility of nested erron, 
it is suggested that error analysis and recovery for memory or cache-related 
errors be performed with both caches disabled. To maintain cache cohercmy, 
the primary cache must be disabled before the primaiy tag store cokt in the 
C-chip. 
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In some cases, a single error is reported in two ways. For example, primary cache tag 
parity errors are reported as soft error interrupts and also as machine checks for D- 
stream read hits. Software must be prepared to handle error interruipts for which there 
is no apparent cause. In the primary cache tag parity error example, the machine check 
handler error recovery phase will clean up the error condition, so the error interrupt 
handler will not find any error bits set. 

8.1.2.3 Error Recovery 

Recovering from errors consists of clearing any latched error state and restoring the 
system to normal operation. There are special considerations involved in recovering from 
cache or memory errors, discussed in the next section. 

In some instances, it may be desirable to stop using hardware that is the source of a 
large number of errors. For example, if a cache reports a large number of errors, it may 
be better to disable the cache. A suggestion is to have software maintain error counts, 
which should be compared against error thresholds on eveiy error report. If the count 
(per unit time) exceeds the threshold, disable the hardware. 

8.1.2.4 Special Considerations for Cache and Memory Errors 

Cache and memory error recovery requires special consideration: 



Cache and memory error recovery should always be done with both caches disabled: 

PCSTS :- ENABLE_REFBESH+*ENABLE_PTS+*FORCE_HIT; 
BCCTL :- ENABLE_REFRESH+*ENABLE_PTS+'^ENABLE_BTS+ 
*FORCE_BHIT; 

To maintain cache coherency, the primaiy cache must always be disabled before the 
primary tag store copy in the C-chip. The refresh enable bit should always remain 

set. 

The error recovery process should start with the most distant component and work 
toward the CPU. In the KA670 system, SHAC, SGEC, and CQBIC errors should be 
processed first, followed by SSC errors, C-chip errors, and, finallji, primary cache 
errors. 

Gr-chip errors are cleared by writing the write-one-to-clear bits in CSR32 to 35. The 
suggested way to do this is to write the values saved during error state collection 
back to the registers. 

SSC errors are cleared by writing the write-one-to-clear bits in the SSCBTR register. 
The suggested way to do this is to write the value saved during eirror state collection 
back to the register. 

C-chip backup tag store parity errors are recovered by rewriting Jihe tag using the 
error address register: 

IF s_bc8ts<BTS_PERR> THEN 
BEGIN 

BCIDX :- a_bcerr; 

BCBTS :- %x20000000; /* Good Parity, Not Valid */ 
END; 

C-chip primary tag store parity errors are recovered by rewriting the tag, using the 
error address register: 
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IF s_bcsts<PlTS_PERR> THEN 
BEGIN 

BCIDX := s_bcerr; 

BCPITS := %x20000000; /* Good Parity, Not Valid */ 
END; 

IF s_bcsts<P2TS_PERR> THEN 
BEGIN 

BCIDX :- s_bcerr; 

BCP2TS := %x20000000; /* Good Parity, Not Valid */ 
END; 

C-chip errors are cleared by writing the write-one-to-clear bits in the BCSTS register. 
The suggested way to do this is to write the value saved during error state collection 
back to the register. 

• Primary cache tag parity errors are recovered by rewriting all tags: 

IF s_pcsts<TAG_PARITY_ERROR> THEN 
FOR i :- to 255 DO 
BEGIN 

PCIDX :- i * 8; 

PCTAG := %x40000000; /* Good Parity, Not Valid */ 
END; 

Primary cache errors are cleared as part of the process of reenabling the cache, 
described in the following paragraphs. 

• The primary cache and primary tag store copy in the C-chip must always be in the 
same state. If the primary cache is disabled, the C-chip primary tag store should also 
be disabled. Conversely, if the C-chip primary tag store is disabled, the primary cache 
should also be disabled. 

To bring both caches back to normal operation, the following sequence is required: 

BCFBTS := 0; 

BCFPTS := 0; 

BCCTL :- ENABLE_REFRESH+ENABLE_PTS+ENABLE_BTS; 

PCSTS :» s_pcsts OR 

(ENABLE_REFRESH+ENABLE_PTS+FLUSH_CACHE) 
AND NOT FORCE_HIT; 

Note that either cache may be disabled by clearing the appropriate enable 
bits in BCCTL and PCSTS while performing the sequence above. In any case, 
BCCTL<ENABLE_PTS> and PCSTS<ENABLE„PTS> must always be in the same 
state. 

If one or both caches are disabled, the system operates at reduced effieieney: 
Configuration Efficiency 



Both caches on 


100% 


Primary cache off 


70% 


Backup cache off 


50% 


Both caches off 


12% 
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8.1^^ Error Retry 

Error retries are a function of the error type (machine check or error interrupt) and the 
error state. The individual sections in this chapter specify the conditions under which 
the instruction stream may be restarted for different errors. 

Before attempting a retry, the stack must be trimmed of all parameters except the 
PC/PSL pair. This is necessary only for machine checks, because error interrupts do not 
provide any additional parameters on the stack. An REI then restarts the instruction 
stream and retries the error. Some form of software loop control should be provided to 
limit the possibility of an error loop. 

If a retry is not attempted, software must determine if the error was fatal to the current 
process, the processor, or the entire system, and take the appropriate action. 

8.2 Console Halt and Halt Interrupt 

A console halt is not an exception, but a transfer of control by the CPU microcode directly 
into the boot ROM's console macrocode, at address 2004 OOOOie- Console halts are 
initiated at power-up by certain microcode-detected double-error conditions, and by 
the assertion of a halt signal. Table 8-3 lists the codes and their meanings. 

A halt interrupt is generated when the SSC asserts the CPU's HALT._L pin due to one of 
the following actions: 



• Pressing | Break | on an unsecured console terminal 

• Asserting the SSC's HALTJN signal 

There is no exception stack frame associated with a console halt. Insitead, SAVPC and 
SAVPSL provide the necessary information (including the halt code). See Section 3.1.6 
for the formats of SAVPC and SAVPSL. 



Table 8-3 Console Halt Codes 



Code 

(Hex) 



Mnemonic 



Meaning 



02 


ERR_HLTPIN 


03 


ERR.PWRUF 


04 


ERRJNTSTK 


05 


ERR_DOUBLE 


06 


ERR_HLTINS 


07 


ERRJLLVEC 


08 


ERR.WCSVEC 


OA 


ERR.CHMPI 


10 


ERR_MCHK_ACV_TNV 


11 


ERR_KSNV_ACV_TNV 


12 


ERR_MCHK_MCHK 


13 


ERRJCSNV_MCHK 


19 


ERR_IE_PSL26_24_101 


lA 


ERR_IE_PSL26_24 110 



HALT_L asserted (break, or external halt). 

Initial power-up. 

Interrupt stack not valid during exception processing. 

Machine check during exception proosssing. 

HALT instruction executed in kernel mode. 

SCB vector bits <1:0> = 11. 

SCB vector bits <1:0> = 10. 

CHMx instruction executed while on the interrupt stack. 

ACV/TNV during machine check processing. 

ACV/TNV during kemel-stack-not-va'lid processing. 

Machine check during machine check processing. 

Machine check during kemel-stack-not-valid processing. 

PSL<26:24> = 101 during interrupt or exception. 

PSL<26:24> = 110 during interrupt or exception. 



Code 

(Hex) 


Mnemonic 


IB 


ERR_1E_PSL26_24_111 


ID 


ERR_REI_PSL26_24_101 


IE 


ERR_REI_PSL26_24_110 


IF 


ERR_REI_PSL26_24_111 


3F 


ERR SELFTEST 
FAILED 
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Table 8-3 (Com.) Console Halt Codes 

Meaning 

PSL<26:24> = 111 during interrupt or exception. 

PSL<26:24> = 101 during REI. 

PSL<26:24> = 110 during REI. 

PSL<26:24> = 111 during REI. 

(Microcoded) power-up self-test failed in the CPU. 



NOTE 

The halt code value is packed into the SAVPSL lonifword (bits <13«>) before 

passin^r control to the boot ROM console macrocode. 

8.3 Machine Check Exception 

The machine check exception indicates a serious system error. Under certain 
circumstances, the error may be recoverable by restarting the instruction. The ability 
to recover depends on the machine check code, the VAX restart bit (R) in the machine 
check stack frame, the state of PSL's first part done bit <FPD>, and the state of the 
double-error bit (PCSTS<trap2>). 

A machine check results from an internally detected consistency error. For example, the 
microcode reaches an impossible state or an externally detected.hardware error such as a 
memory parity error occurs. 

A machine check is technically a macro instruction ABORT. The CPU microcode tries to 
convert the condition to a FAULT by unwinding the current instruction, but there is no 
guarantee that the instruction can be properly restarted. As much diagnostic information 
as possible is pushed on the stack (Section 8.3.1), and the rest of the error parsing is left 
to the operating system. 

When the software machine check handler receives control, it must expUcitly 
acknowledge receipt of the machine check with the following instruction: 

MTPR #0, #PRS_MCESR ; PR$_MCESR-38 

This acknowledgement should be done early in the software machine check handler to 
clear the internal machine-check-in-progress flag. 

8.3.1 Machine Check Stacl( Frame 

Information in the machine check stack frame (Figure 8-1) is parsed by the error- 
handling macrocode to determine exactly what caused the machine check. 
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00000018 


-.(SP) Byte 
Count 


31 
R 


30 16 
Undefined 


15 

F^CHK_xxxx 







Flags (VAX 
Restart Bit 
<31> Fault 
Code) 


VA 


VA at Time 
of Fault 


VISA 


VIBA at Time of fault 
of Fault 


ICCS..SISR 


ICCS..SISR 
at Time of Fault 


31 24 
DELTA-PC 


23 21 
Undef. 


20 18 
AT 


17 16 
DL 


15 8 
OPCODE 


7 4 
Undef. 


3 


RN 





Internal State 
at Time of 
Fault 


SC 


Internal 
Register 


PC 


Backed-Up PC 


PSL 


PSL at Time 
of Fault 



Figure 8-1 Stack Frame for Machine Check Exception 

• Byte count - The size of the stack frame in bytes is ISie bytes, not including PSL, 
PC, and the byte count longword. Stack frame PC and PSL values should always be 
referenced using this count as an offset from the stack pointer. 

• R (VAX restart bit) - A flag from the hardware and microcode to the operating 
system, used in the software equation to determine whether or not the current 
macroinstruction is restartable after error cleanup. Other terms include PSL<FPD>, 
and PCSTS<trap2> (the primary cache double-error bit). 

• Fault code - The type of machine check (Figure 8-2). 

• VA - The address being processed by the CPU. This address is not necessarily 
relevant; the error handler should check the specific error address corresponding 
to the device or mechanism that signaled the error. 

• VIBA - The CPU prefeteh virtual instruction buffer address at the time of the fault. 

• ICCS..SISR - The interrupt state information format (Table 8-4). 

Table 8-4 Interrupt State Format 



Bits 



Contents 



<22> 
<15:1> 



ICCS<6> 
SISR<15:1> 



Delta-PC - Difference in the values of the current incremented IPC (at the time 
the machine check was detected) and the PC of the instruction opcode. The exact 
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interpretation of this field requires a detailed knowledge of the internal pipeline 
operation of the CPU. This field should not be used by software to make recovery 
decisions. 
• AT - The current setting of the CPU's E-box address type latch, possibly relating 
to the last (or upcoming) memory reference. Table 8-5 lists the values and 
interpretation. 

Table 8-5 AT (Address-Type) Codes 



Value 

(Binary) Interpretation 

000 Read 

001 Write 
010 Modify 

Oil Unassigned, CPU chip error 

100 Unassigned, CPU chip error 

101 Address 

110 Variable bit 

111 Branch 



• DL - The current setting of the CPU's E-box data length latch, possibly relating 
to the last (or approaching) memory reference. Table &-6 lists the values and 
interpretation. 

Table &-6 Data Length (DL) Codes 



Value 

(Binary) Interpretation 



00 BYTE 

01 WORD 

10 LONG, F_Floating 

11 QUAD, D.Floating, G_Floating 



• Opcode - The opcode byte value of the instruction being processed at the time of the 
fault. For a 2-byte opcode, the value is the second byte. 

• RN - The value of the CPU's E-box RN register at the time of the fault, possibly 
indicating the last GPR referenced by the E-box during specifier or instruction flows. 

• SC - Internal microcode-accessible register. 

• PC, PSL - Standard exception stack frame program counter and program status 
longword at the time of the fault. 

The machine check fault code from the stack frame specifies the type of error and the 
conditions under which restart is possible. Table 8-7 lists the possible fault codes. 
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Table 8-7 Machine Check Fault Codes 



Code 

(Hex) 


Mnemonic 


Meaning 




01 


MCHKJ'P.PROTOCOL 
ERROR 


Protocol error during FPU 
operand/result transfer. 


(R=1).(FPD=0) 


02 


MCHK_FPJLLEGAL .OPCODE 


Illegal opcode detected by FPU. 


(R=1).(FPD=0) 


03 


MCHKJi'P_OPERAND_PARITY 


Operand parity error detected 
by FPU. 


(R=1).(FPD=0) 


04 


MCHKJT.UNKNOWN 
STATUS 


Unknown status returned by 
FPU. 


(R=1).(FPD=0) 


05 


MCHKJFP_RESULT_PARITY 


Returned FPU result parity 
error. 


(R=1).(FPD=0) 


08 


MCHK_TBM_ACV_TNV 


TB miss status generated in 
ACV/TNV microflow. 


(CR=1)+(FPD=1)) 


09 


MCHK_TBH_ACV_TNV 


TB hit status generated in 
ACV/TNV microflow. 


((R=1)+(FPD=1)) 


OA 


MCHKJNT_ID_VALUE 


Undefined INT.ID value during 
interrupt service. 


((R=1)+(FPD=1)) 


OB 


MCHKJUOVC.STATUS 


Undefined state bit combination 
in MOVCx. 


(PPD=1) [see 
description] 


OC 


MCHK_UNKNOWNJBOX_ 
TRAP 


Undefined trap code produced 
by the I-box. 


(R=1).(FPD=0) 


OD 


MCHK_UNKNOWN_CS_ADDR 


Undefined control store address 
reached. 


((:R=1)+(FPD=1)) 


10 


MCHK BUSERR READ 
PCACHE 


Primary cache tag or data parity 
error during read. 


((:r=i)+(FPD=i)).(tr2=o) 


11 


MCHK_BUSERR_READ_DAL 


DAL bus or data parity error 
during read. 


((:r=i)+(Fpd=i)).(tr2=o) 


12 


MCHK_BUSERR_WR1TE_DAL 


DAL bus error on write or clear 
write buiTer. 


No 


13 


MCHK_UNKNOWN BUSERR 
TRAP 


Undefined bus error microtrap. 


No 



R = the VAX restart bit in the machine chedt stack frame. 
FPD = the CPU PSL<FPD> firet part done bit. 
TR2 = the CPU PCSTS<trap2> double-error bit. 
. = the logical AND operation, 
-f = the logical OR operation. 



8.3.2 Machine Check Parse Tree 

Figure 8—2 shows the machine check parse tree. 

An error parse tree is a diagram that shows how the progression of an error can be 
tracked. Each horizontal line represents a signal. Moving from left to right, each vertical 
line represents a deeper level of error. The most nested errors are toward the right side 
of the diagram. The least nested errors are toward the left. 
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(Select One) 
MCHK FP PROTOCOL ERROR 



MCHK FP ILLEGAL OPCODE 



MCHK FP OPERAND PARITY 



MCHK FP UNKNOWN STATUS 



MCHK FP RESULT PARITY 



MCHK TBM ACV TNV 



MCHK TMH ACV TNV 



MCHK INT ID VALUE 



MCHK MOVC STATUS 



MCHK_UNKNOWN_IBOX_TRAP 



MCHK_BUSERR READ.PCACHE 
(Select AllJ 



PCSTS<Tag_Parity_Error> 



PCSTS<P_Data_Parity_Error> 



Neither 



FPU Protocol Error 



FPU Illegal Opcode 



FPU Operand Parity Error 



FPU Unknown Result Status 



FPU Result Parity Error 



TB Miss Status During ACV/TNV 
Processing 

TB Hit Status During ACV/TNV 
Processing 

Undefined Interrupt ID Value 



MOVCx Status Encoding Error 



Unknown l-Box Trap 



Primary Cache Tag Parity Error on 
D-Stream Read Hit 

Primary Cache Data Parity Error on 
D-Stream Read Hit 

Inconsistent Status (One or both 
bits must be set.) 



Figure 8-2 (Cont.) Machine Clieck Parse Tree 
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MCHK_BUSERR_READ_DAL 
(Select One) 



PCSTS<RDAL_Data_Parity_Error> 
(Select One) 

PCSTS<B Cache Hit> 



Otherwise 



^ Backup Cache Data Parity Error on 

D-Stream Read 

*• RDAL Data Parity Error on 

D-Stream Read 
PCSTS<Bus_Error> 
(Select One) 

MEMCSR32<Error Summary> 
(Select One) 

MEMCSR32<Nonextstent Memory> 

* NXM on Main Memory D-Stream 
Read 

MEMCSR32<Uncorrectable Memory Error> 

•- Uncorrectable ECO error on Main Memory 

D-Stream Read 



MEMCSR32<Nonexistent l/0> 



MEMCSR32 :l/0 Error> 



CBTCR<Bus Timeout> 



NXM on I/O D-Stream Read 



CP Bus Timeout 



DSER<Master DMA NXM> 
^ Q22-bus NXM/NOSACK 



DSER<No Grant Timeout> 
>^ Q22-bus NOGRANT 



DSER<Q22-bus Parity Error> 
>- Q22-bus Device Parity Error 



Otherwise 



Otherwise 



Otherwise 



CPDAL Data Parity During D-stream Read 
of SHAC or SGEC GSRs oNly 

Inconsistent Status (MEMCSR32<Error Sum> 
set without any other error bits set.) 

Inconsistent Status (Machine check 
during error interrupt.) 

Inconsistent Status (No PCSTS error 
bits set.) 



Figure 8-2 (Com.) Machine Check Parse T^ee 
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MCHK BUSERR WRITE DAL 



Otherwise 



MCHK UNKNOWN BUSERR TRAP 



MCHK UNKNOWN CS ADDR 



Otherwise 



Key: 



Inconsistent Status (This cannot 
happen on the KA670.) 

Unknown Bus Error Trap 



Unexpected Control Store Address 



Inconsistent Status (Unknown 
machine check code.) 



Select One 

Select All 
Otherwise 

Neither 



- Exactly one case must be true. If zero or more 

than one is true, the status is inconsistent. 

- More than one case may be true. 

- Fall-through case for Select One, if no other 
options are true. 

- Fall-through case for Select All, if no other 
options are true. 



Figure 8-2 Machine Checi( Parse 'H'ee 



8.3.3 MCHK FP PROTOCOL ERROR 



Description: The CPU or FPU detected a protocol error during an operand/result 
transfer. During a result return, the cases listed in Table 8-8 cause this machine check. 

Tabie8-8 IMCHK FP PROTOCOL ERROR 



CPSTA 



CPDAT<2K)> 



Detected by 



00 


XXX 


CPU 


11 


XXX 


CPU 


10 


000 


FPU 



This error is probably due to a bit flipped on the CPSTA or CPDAT lines during an 
opcode, operand, or result transfer. 

Recovery procedures: No explicit error recovery is required. If the error reoccurs, 
disable the FPU by writing a to ACCS<1>. 

Restart condition: Because this error is detected during the execution flow of an FPU 
instruction, R should always be 1 and PSL<FPD> should always be 0. 

Retry if: 



(R=l) AND (PSL<FPD>=0) 
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8.3.4 MCHK_FPJLLEGAL_OPCODE 

Description: An illegal opcode was detected by the FPU and report<3d during result 
return. The probably cause is a bit flipped on the CPSTA or CPDAT lines during an 
opcode transfer to the FPU. 

Recoveiy procedures: No explicit error recovery is required. If the error reoccurs, 
disable the FPU by writing a to ACCS<1>. 

Restart condition: Because this error is detected during the execution flow of an FPU 
instruction, R should always be 1 and PSL<FPD> should always be 0. 

Retry if: 

(R-l) AND (PSL<FPD>-0) 

8.3.5 MCHK_FP_OPERAND_PARITY 

Description: The FPU detected a parity error during an operand trsmsfer and reported 
the error during a result return. Note that the CPU should also have detected backup 
cache or memory parity errors, which would have resulted in a MCHI^BUSERR_READ_ 
DAL machine check instead. 

The MCHK_FP_OPERAND_PARITY machine check indicates that the parity error was 
detected only by the FPU. This implies that the CPU generated bad parity, or the CPU 
and FPU saw different operands (or parity) from the backup cache or memory. The error 
is a function of the data source listed in Table 8-9 (which cannot be determined from the 
machine check). 

Table 8-9 MCHK_FP_OPERAND_PARITY 

Data Source Possible Causes 

GPR CPU parity generation error, FPU parity<P> checking error, RDAL bus 

error during operand transfer 

I-stream CPU parity generation error, FPU parity<P> checking error, RDAL bus 

error during operand transfer 

Primary cache CPU parity checking error, FPU parity<P> checking error, RDAL bus 

error during operand transfer 

Backup cache CPU parity checking error, FPU parity<P> checking error, RDAL bus 

error during operand transfer 

Memory CPU parity checking error, FPU parity<P> checking error, RDAL bus 

error during operand transfer 

NOTE 

It is possible to get this machine check if an FPU operand is xead £rom an I/O 

space location. CPU parity checking is disabled for I/O space reads, but the 

FPU checks parity for all operands. 

Recovery procedures: No explicit error recovery is required. If the error reoccurs, 

disable the FPU by writing a to ACCS<1>. 

Restart condition: Because this error is detected during the execution flow of an FPU 
instruction, R should always be 1 and PSL<FPD> should always be 0. 

Retry if: 

(R-l> AND (PSL<FPD>-0) 



KA670 Error Handling 229 



8.3.6 MCHK_FP_UNKNOWN_STATUS 

Description: The FPU returned an unassigned status code. This error occurs when 
CPSTA=10 and CPDAT<2:0>=111 appear with the returned result (from the FPU to 
CPU). The probable cause is a bit flipped on the CPSTA or CPDAT lines during the result 
transfer to the CPU. 

Recovery procedures: No explicit error recovery is required. If the error reoccurs, 
disable the FPU by writing a to ACCS<1>. 

Restart condition: Because this error is detected during the execution flow of an FPU 
instruction, R should always be 1 and PSL<FPD> should always be 0. 

Retry if: 

(R=l) AND (PSL<FPD>=0) 

8.3.7 MCHK_FP_RESULT_PARITY 

Description: The CPU detected a result data parity error during an FPU result transfer. 
The probable cause is a bit flipped on the RDAL bus or parity lines. 

Recoveiy procedures: No explicit error recovery is required. If the error reoccurs, 
disable the FPU by writing a to ACCS<1>. 

Restart condition: Because this error is detected during the execution flow of an FPU 
instruction, R should always be 1, PSL<FPD> should always be 0. 

Retry if: 

(R=l) AND (PSL<FPD>=0) 

8.3.8 MCHKjrBM_ACV_TNV 

Description: During ACV/TNV microcode processing, the MMGT.STATUS bits specified 

a TB-miss status (which should not be possible during ACV/TNV processing). The 

probablle cause is an internal error in the memory management hardware or microbranch 

logic. 

Recoveiy procedures: No explicit error recovery is required in response to this error. 

Restart condition: This error can happen during the microcode processing of an 
ACV/TNV exception on any virtual memory reference. 

Retry if: 

((R=l) OR (PSL<FPD>=1)) 

8.3.9 MCHK_TBH_ACV_TNV 

Description: During ACV/TNV microcode processing, the MMGT.STATUS bits specified 
a TB-hit status (which should not be possible during ACV/TNV processing). The probable 
cause is an internal error in the memory management hardware or the microbranch logic. 
Recovery procedures: No explicit error recovery is required. 

Restart condition: This error can happen during the microcode processing of an 
ACV/TNV exception on any virtual memory reference. 

Retry if: 

(R=l) OR (PSL<FPD>=1) 
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8.3.10 MCHKJNTJD_VALUE 

Description: During interrupt processing, the microbranch on the contents of the 
INT.ID register resulted in an unexpected interrupt ID. The probable cause is a failure in 
the interrupt encoding logic or microbranch logic. 

Recoveiy procedures: No explicit error recovery is required. 

Restart condition: Because interrupts can only occur between instructions or in the 
middle of interruptable instructions, R should always be a 1 unless F'SL<FPD> is a 1. If 
PSL<FPD> is a 1, PC should point to MOVCx, CMPCx, LOCC, SKPC, SCANC or SPANG. 

Retry if: 

(R=l) OR (PSL<FPD>-1) 

8.3.11 MCHK_MOVC_STATUS 

Description: During the execution of MOVCx, the two state bits that encode the state of 
the move (forward, backward, fill) were found set to the fourth (illegal) combination. The 
probable cause is a failure in the state bit logic or microbranch logic. 

Recovery procedures: No explicit error recovery is required. 

Restart condition: Because the state bits encode the operation, the instruction cannot 
be restarted in the middle of the MOVCx. If software can determine that no specifiers 
were overwritten (MOVCx destroys RO to R5 and memory, due to string writes), the 
instruction may be restarted from the beginning by clearing PSL<FPD>. This should be 
done only if the source and destination strings do not overlap and if: 

(PSL<FPD>-1) 

8.3.12 MCHK_UNKNOWNJBOX_TRAP 

Description: The I-box requested a microtrap to report an illegal instruction or a 
reserved operand fault, but the bits that encode the reason specified an illegal value. The 
probable cause is a failure in the I-box/E-box interface, or in the microsequencer trap 
logic. 

Recovery procedures: No explicit error recovery is required. 

Restart condition: Because this microtrap can only occur at an instruction boundary, R 
should be a 1 and PSL<FPD> should be a 0. 

Retry if: 

(R-l) AND (PSL<FPD>-0) 

8.3.13 MCHK_BUSERR_READ_PCACHE 

This code indicates that one of two errors was detected during a D-stiream read that hit 
in the primary cache. To get either of these machine checks, the primary cache must be 
enabled. 

PCSTS<tag_parity_error> and PCSTS<P_data_parity_error> distinguish the cases. If 
neither bit is set, the status is inconsistent, and the error should not ibe retried. In both 
cases, PCERR contains the physical address of the error. 
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8.3.13.1 Primary Cache Tag Parity Error on D-Stream Read Hit 

Description: A primary cache tag parity error was detected on a D-stream read hit. 

PCSTS<trapl>, PCSTS<interrupt>, and PCSTS<tagjparity_error> should all be set 

This error is also reported by a soft error interrupt.) 

Recoveiy procedures: Write all primary cache tags with good parity and cleared valid 

bits. Then perform the full memory error recovery procedures (Section 8.1.2.3). If the 

error reoccurs, disable both the primary cache and the primary tag store copy in the 

C-chip. 

Restart condition: 

Retry if: 

((R=l) OR (PSL<FPD>=1) ) AND (PCSTS<trap2>-0) . 

8.3.13.2 Primary Cache Data Parity Error on D-Stream Read Hit 

Description: A Primary cache data parity error was detected on a D-stream read hit. 
PCSTS<trapl> and PCSTS<P_data_parity_error> should both be set. 
Recovery procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). If the error reoccurs, disable both the primary cache and the primary 
tag store copy in the C-chip. 

Restart condition: 

Retry if: 

((R=l) OR (PSL<FPD>=1) ) AND (PCSTS<trap2>=0> 

8.3.14 MCHK_BUSERR_READ_DAL 

This code indicates that one of two classes of errors was detected during a D-stream read. 
PCSTS<RDAL_data_parity_error> and PCSTS<bus_error> distinguish the two classes. If 
neither or both bits are set, the status is inconsistent and the error should not be retried. 

8.3.14.1 Data Parity Error on D-Stream Read 

A data parity error was detected during a D-stream read. The source of the data parity 
error is either the backup cache or memory, distinguished by PCSTS<B_cache_hit>. In 
both cases, PCERR contains the physical address of the error. 

8.3.14.1.1 Backup Cache Data Parity Error on D-stream Read 

Description: A data parity error was detected during a D-stream read hit in the backup 

cache. PCSTS<TRAP1>, PCSTS<RDAL_datajparity_error>, and PCSTS<B_cache_hit> 

should all be set. 

Recovery procedures: Perform the full memory error recovery procedures 

(Section 8.1.2.3). If the error reoccurs, disable the backup cache. 

Restart condition: 

Retry if: 

((R=l) OR (PSL<FPD>=1)) AND (PCSTS<trap2>-0> . 
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8.3.14.1.2 Memory Data Parity Error on D-Stream Read 

Description: A data parity error was detected during a D-stream read from memory. 
Note that an actual memory parity error would have been reported as a bus error (next 
section). This error implies that the parity went bad between the G-chip and the CPU. 
PCSTS<trapl> and PCSTS<RDAL_data_parity_error> should both be set. PCSTS<B_ 
cache_hit> should be cleared. 

Recovery procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). 

Restart condition: 

Retry if: 

((R-l) OR (PSL<FPD>-1)) AND (PCSTS<trap2>=0) . 

8.3.14.2 Bus Error on D-Stream Read 

An RDAL D-stream read transaction was terminated with ERR_L. In order for the 
BCSTS register to log this error, the backup cache must be on and the reference must be 
to a non-I/0 space address. 

8.3.14.2.1 Memory Error on Requested Quadword of 0-stream Read 
Description: The G-chip detected an error on a D-stream read. MEMCSR33 must 
match (to the closest octaword) PCERR. Otherwise, the status is inconsistent, and the 
error should not be retried. MEMCSR33 and PCERR contain the physical address of the 
error. 

The source of the error is distinguished by bits in MEMCSR32, as follows: 

• MEMCSR32<error 8uninuury> - This bit must be set, indicating that an error has 
been logged by the G-chip. 

• MEMCSR32<nonexistent memory> - The non-1/0 octaword address logged 
in MEMCSR33 is not mapped by the G-chip, so the address is nonexistent. 
PCSTS<trapl> should be set. If this is a real NXM, a retry will not succeed and 
should not be attempted if NXMs are expected. If NXMs are not escpected and a retry 
is desired, do so under the conditions stated above. 

• MEMCSR32<uncorrectabIe memory error> - The G-chip detected an 
uncorrectable ECC error within an octaword at the address logged in MEMCSR33. 
PCSTS<trapl> should be set. 

• MEMCSR32<nonexistent I/0> - The I/O longword address logged in MEMCSR34 
was not responded to by any of the CP bus I/O devices, so the address is considered 
nonexistent. PCSTS<trapl> should be set. If this is a real NXM, a retry will not 
succeed and should not be attempted if NXMs are expected. If NXHis are not expected 
and a retry is desired, do so under the conditions stated above. 

• MEMCSR32<I/0> - The I/O longword read whose address is logg(jd in MEMCSR34 
had an error. There are five types of CP bus error that can cause this error: 

- CBTCR<bus timeout> - This is a CP bus timeout. This bit indicates that a CP 
bus I/O device is in an inconsistent state— the device deasserts its NOT_ME line 
(indicating the address is for it), but never completes the CP bus cycle with RDY. 
The SSC's 15-millisecond watch dog timer expires, terminating the cycle with 
ERR. PCSTS<trapl> should be set. 

- DSER<master DMA NXM> - This is a Q22-bus NXlkl/NOSACK error. The 
Q22-bus address is stored in DMEAR. 
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- DSER<no grant> - This a Q22-bus NOGRANT error, indicating that the 
CQBIC's lO-microsecond NOGRANT timer has expired. 

- DSER<Q22-bus parity error> - This a Q22-bus device parity error. The Q22- 
bus address is stored in DMEAR. 

- None of the above bits set - This indicates that a CP bus parity error occurred 

while reading either the SHAC's or SGEC's internal registers. 

Recovery procedtires: Perform the full memory error recovery procedures 
(Section 8.1.2.3). 

Restart condition: Unless otherwise stated in the error descriptions, retry if: 

((R=l) OR (PSL<FPD>=1) ) AND (PCSTS<trap2>=0) , 

8.3.15 MCHK_BUSERR_WRITE_DAL 

Description: An RDAL write or clear write buffer transaction was terminated with the 
ERR_L terminator. For the BCSTS register to log the error, the backup cache must be 
on and the reference must be to a non-I/0 space address. The G-chip in the KA670 never 
does this, so the error is considered serious and unrecoverable. 

8.3.16 MCHK_UNKNOWN_BUSERR_TRAP 

Description: The CPU's BIU requested a microtrap to report a cache or bus error, but 
the bits that encode the reason specified an illegal value. The probable cause is a failure 
in the BIU or microsequencer trap logic. 

Recovery procedures: No explicit error recovery is required. • 

Restart condition: Because this error may be masking a write error, a retry should not 
be attempted. 

8.3.17 MCHK_UNKNOWN_CS_ADDR 

Description: An unexpected address was reached in the CPU's control store. The 
probable cause is a failure in the microsequencer logic or a microcode bug. 

Recoveiy procedures: No explicit error recovery is required. 

Restart conditions: 

Retry if: 

(R-l) OR (PSL<FPD>=1) 
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8.4 Power-Fail Interrupt 

Power-fail interrupts are requested to report imminent loss of power to the module. 
Power-fail interrupts are requested at IPL lEie and dispatched through SCB vector 

0Ci6. 

The stack frame for a power fail interrupt is as follows: 



PC 



PSL 



:(SP) 



The KA670 system supports the standard Q22-bus time of 20 milliseconds to execute the 
software needed to save the processor state. 

8.5 Hard Error interrupts 

Hard error interrupts are requested to report any error detected asynchronously with 
instruction execution. This results in an interrupt at IPL lDi6> dispatched through SCB 
vector 60i6. Typically, these errors indicate that machine state is corrupted and that 
retry is not possible. 

The stack frame for a hard error interrupt is as follows: 



PC 



PSL 



:(SP) 



8.5.1 Parse Tree for a Hard Error Interrupt 

Figure 8-3 shows the parse tree for a hard error interrupt. 
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(Select One) 

MEMCSR32<Error Summary^ 
(Select One) 



MEMCSR32<Bus Parity Error> 



RDAl. Data Parity Error on Write 



MEMCSR32<Uncorrectable Memory Error> 

» Uncorrectable Main Memory on Masked 
Write 

MEMCSR32<Nonexistent Memory Error> 
— » NXM on Main Memory Write 



MEMCSR32<Nonexlstent l/0> 



NXM on I/O Write 



MEMCSR32<l/0 Error> 
(Select One) 

CBTCR<Bus Timeout> 



CP Bus Timeout on a Write 



DSER<Master DMA NXM> 



Q22-bus NXM/NOSACK on a Write 



DSER<No Grant Timeout> 
*- Q22-bus NOGRANT on a Write 



DSER<022-bus Parity Error> 
» Q22-bus Device Parity Error on a Write 



Otherwise 



Otherwise 



Otherwise 



*- Inconsistent Status (MEMCSR32<l/0 Error> 
Without Any Other Error Bits Set 

Inconsistent Status (MEMCSR32<Error Sum> 
Set Without Any Other Error Bits Set 



Inconsistent State Interrupt Without 
Any Errors Bit Set 



Key: 

Select One 



Exactly one case must be true. If zero or more 
than one Is true, the status is inconsistent. 



Select All - More than one case may be true. 

Otherwise - Fall-through case for Select One, if no other 

options are true. 



Figure 8-3 Parse Tree for a Hard Error Interrupts 



236 KA670 Error Handling 

8.5.2 RDAL Data Parity Error on Memory Write 

Description: The G-chip detected a parity error on the RDAL data for a memory write 
from the CPU. The probable cause is a bit flipped on the D-bus, or an intentional or 
unintentional bad parity generated by the CPU. The GMI is completed with bad ECC. 

Recovery procedures: Clear all error bits in MEMCSR32. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.3 Uncorrectable IMain IMemory Error on Maslced Write 

Description: The G-chip detected an uncorrectable error in the read part of a read- 
modiiy-write trsmsaction on a masked memory write from the CPU.The GMI is completed 
with bad ECC. 

Recovery procedures: Clear all error bits in MEMCSR32. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.4 Main Memory Nonexistent Write 

Description: The G-chip detected a NXM error on the RDAL data for a memory write 
from the CPU. 

Recovery procedures: Clear all error bits in MEMCSR32. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.5 I/O Nonexistent Write 

Description: The G-chip detected a NXM error for a I/O write from the CPU. 

Recovery procedures: Clear all error bits in MEMCSR32. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.6 CP Bus Timeout on a Write 

Description: The SSC's 15-milli second CP bus watchdog has expired on an I/O write 
from the CPU. 

Recoveiy procedures: Clear all error bits in MEMCSR32. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 
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8.5.7 Q22-bus NXM/NOSACK on a Write 

Description: The CQBIC has failed while trying to complete a write on the Q22-bus. 

Recovery procedures: Clear all error bits in MEMCSR32 and DSER. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.8 Q22-bus NOG RANT on a Write 

Description: The CQBIC has failed to be granted the Q22-bus while trying to complete 

a write. 

Recovery procedures: Clear all error bits in MEMCSR32 and DSER. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.5.9 Q22-bus Device Parity Error on a Write 

Description: The CQBIC has been notified of a Q22-bus data parity error while trying 

to complete a write. 

Recovery procedures: Clear all error bits in MEMCSR32 and DSER. 

Restart conditions: Because this error indicates a failed write, no retry is possible. 

8.6 Soft Error Interrupts 

Soft error interrupts are requested to report errors that were detected but did not affect 
instruction execution. This results in an interrupt at IPL lAig, dispatched through SCB 
vector 54 16. 

The stack frame for a soft error interrupt is as follows: 



PC 



PSL 



;(SP) 



8.6.1 Parse Tree for Soft Error Interrupts 

Figure 8-4 shows the parse tree for soft error interrupts. 
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(Sated Alt) 

PCSTS<INTERnuPT> 
— I (Salaei All) 



PCSTS<P_T«fl_Parlly_Error> 



PCSTS<P_Data_Parily_Error> 



PCSTS<RDAL_DBla_Parity Error> 
(Salad One) 

PCSTS<B_Caclio_HII> 



Oltieiwlse 



Prlmaiy Cache Tag ParHy Error m Read, 
Write, or Invalidate 

Primary Cactie Data Parity Error on 
l-Slream Read l^it 



Bacliup Cache Data Parity Error 
on l-Stream Read or Nonraqueated 
Longword ol D-Stream Read 

ROAL Data Parity Error on 
l-Stream Read or nonrequetted 
Longword of D-Stream Read 



PCSTS<Bu»_Efror> 
(Select One) 

MEIMCSR32<Errer Summary> 



MEMCSR32<Nonexiitent l/0> 



"I 



MEMC8n32<Correctable Memory Error> 

■ Main Memory Corractabie Erro* 

MEMCSR32<Uneorreclable Memory Error> 

» Main Memory Uncorrectable Error 
on l-Stream Read Only 

I/O NXM on l-Straam Read 

CP But Timeout on l-Slream Plead 
IneontKieni State 
Inconaiitani State 

Backup Tag Store Parity Error 



MEMCSR32<t/0 Error> 
CBTCR<BLO> 



Otherwise 



Otherwise 



BCSTS<Status_Locl(3> 
(Select Ail) 
BCSTS<BTS Parhy_Error> 



BCST8<P1 TS_Parlty_Error> 



aCSTS<P2TS_Parily_Error» 



BCSTS<But_Err> 



Otharwlte 



- Primary Tag Store Parity Error 
(1« haH) 

•■ Primary Tog Store Parity Error 
(2nd hall) 

>- RDAL Protocol Error 
•- inoonslatent State 



Key: 



Select One - Exactly one ease mutt be true. It zero or more 

than one It true, the ttatut It ineontltlant. 

Select All - More than one cate nwy be true. 

Otherwise - FalMhrough case lor Select One, II no ether 

optiont are true. 



Figure 8-4 Soft Error Irrterrupt Parse Ttee 

All errors reported by this interrupt are soft errors. A retry is always possible after 
recovery, unless otherwise stated in the description of an error. 
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8.6.2 Cache or Memory Errors 

A primary cache error, data parity error, or bus error is detected during a memory 
reference. PCSTS<interrupt> distinguishes this class from others. At least one of 
PCSTS<P_tag_parity_error>, PCSTS<P_data_parity_error>, PCSTS<RDAL_data_parity_ 
error>, or PCSTS<bus_error> should be set. PCERR does not contain the error address 
in this class of errors. 

The CPU microcode automatically retries all I-streain errors, using D-stream reads. If 
the error is hard, the D-stream read is reported as a machine check with code MCHK_ 
BUSERR_READ_DAL. If the error is transient, it is reported as a soft error interrupt; 
this indicates the retry was successful. 

8.6.2.1 Primary Cache Errors 

Two types of primary cache errors can be detected during an I-stream read, write, or 
invalidate. The primary cache must be on to get either error. PCSTS<P_tag_parity_ 
error> and PCSTS<P_data_parity_error> distinguish the two cases. 

8.6.2.1.1 Primary Cache Tag Parity Error 

Description: A primary cache tag parity error was detected during an I-stream read, 
a D-stream read miss, a write, or an invalidate. If the error had been detected during 
a D-stream read hit, the error would have been reported as a machine check with code 
MCHK_BUSERR_READ_PCACHE. PCSTS<P_tag_parity_error> and PCSTS<interrupt> 
should both be set. 

Recovery procedures: Write all primary cache tags with good parity and cleared valid 
bits. Then perform the full memory error recovery procedures (Section 8.1.2.3). If the 
error reoccurs, disable both the primary cache and the primary tag store copy in the 
C-chip. 

8.6.2.1.2 Primary Cache Data Parity Error on i-Stream Read Hit 

Description: A primary cache data parity error was detected during an I-stream read 
hit. If the error had been detected during a D-stream read hit, the error would have been 
reported as a machine check with code MCHK_BUSERR_READ_PCACHE. PCSTS<P_ 
data_parity_error> and PCSTS<interrupt> should both be set. 

Recovery procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). If the error reoccurs, disable both the primary cache and the primary 
tag store copy in the C-chip. 

8.6.2.2 RDAL Data Parity Errors 

An RDAL data parity error can be detected during an I-stream read or on the 
nonrequested longword of a D-stream read. If the error had been detected in the 
requested longword of a D-stream read, the error would have been reported as a machine 
check with code MCHK_BUSERR_READ_DAL. The source of the data parity error is 
either the backup cache or memory, distinguished by PCSTS<B_cache_hit>. 

8.6.2.2.1 Backup Cache Data Parity Error 

Description: A data parity error was detected during an I-stream read or in 

the nonrequested longword of a D-stream read that hit in the backup cache. 

PCSTS<interrupt>, PCSTS<RDAL_data_parity_error>, and PCSTS<B_cache_hit> should 

all be set. 

Recovery procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). If the error reoccurs, disable the backup cache. 
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8.6^.2.2 Memory Data Parity Error 

Description: A data parity error was detected during an I-stream read or in the 
nonrequested longword of a D-stream read from memory. Note that an actual memory 
parity error would have been detected by the G-chip and reported as a memory read error 
(Section 8.6.2.3.1). This error implies that the parity went bad between the G-chip and 
the CPU. PCSTS<interrupt> and PCSTS<RDAL_data_parity_error> should both be set. 
PCSTS<B_cache_hit> should be cleared. 

Becoveiy procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). 

8.6^.3 Bus Error on l-Stream Read 

An RDAL I-stream read transaction was terminated with ERR_L. If the error had been 
detected during a D-stream read, the error would have been reported as a machine check 
with code MCHK_BUSERR_READ_DAL. For the BCSTS register to log the error, the 
backup cache must be on and the reference must be to a non-I/0 space address. 

8.6^.3.1 Memory Error l-Stream Read 

Description: The G-chip detected an error on an I-stream read. Depending on the type 

of error, either MEMCSR33 or MEMCSR34 contains the physical address of the error. 

The source of the error is distinguished by bits in MEMCSR32, as follows: 

• MEMCSR32<uncorrectable memoiy error> - An uncorrectable ECC error was 
found in the naturally aligned octaword around the I-stream read. PCSTS<bus_ 
error>, PCSTS<INTERRUPT>, BCSTS<Bus_err>, and BCSTS<statu8_lock> should 
all be set. 

• MEMCSR32<nonexistent VO> - The I-stream read from I/Q si)ace is nonexistent. 
The G-chip detects an I/O NXM. This differs from a CP bus timeout, where the SSC's 
watchdog timer detects the timeout. PCSTS<bus_error> and PCSTS<intemipt>, 
should also be set. 

• MEMCSR32<I/0 errtyo - The I-stream read from I/O space was timed out by the 
SSC. The SSC's watchdog timer detected a CP bus timeout. This differs from an I/O 
NXM, where the G-chip detects the I/O NXM. PCSTS<bus_error>, PCSTS<interrupt>, 
and CBTCR<BTO> should all be set. 

Becovery procedures: Perform the full memory error recovery (Section 8.1.2.3). 

8.6.3 Cache Fill Errors on the Nonrequested Quadword of a Read 

Description: The C-chip detected an RDAL data parity error on the nonrequested fill 
quadword of a D-stream or I-stream read. 

The source of the error is distinguished by the PCSTS<B_cache_hit> bit. If PCSTS<B_ 
cache_hit> is set, then the source of the data was the backup cache RAMs. If PCSTS<B_ 
cache_hit> is clear, then the source on the data is the G-chip. 

Recovery procedures: Perform the full memory error recovery procedures 
(Section 8.1.2.3). 

8.6.4 C-Chip Errors 

The C-chip detected a tag parity error during a tag store access, or si bus protocol error 
during an RDAL transaction. The C-chip must be on to detect either of these errors. 
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8.6.4.1 C-Chip Backup Tag Store Parity Error 

Description: A tag store parity error was detected in the backup tag store during a read, 
write, fill, invalidate, or I_bus access. BCSTS<BTS„parity_err> and BCSTS<status_lock> 
should both be set. BCERR contains the physical address of the error. 

Recovery procedures: Use the BCERR address to rewiite the tag with good parity 
and a cleared valid bit. Then perform the full memory error recovery procedures 
(Section 8.1.2.3). If the error reoccurs, disable the backup cache. 

8.6.4.2 C-Chip Primary Tag Store Parity Error 

Description: A tag store parity error was detected in one of the primary tag 
stores during a fill, invalidate, or I_bus access. Either BCSTS<PlTS_parity_err>, 
BCSTS<P2TS_parity_err>, or both should be set, along with BCSTS<status_lock>. 
BCERR contains the physical address of the error. 

Recovery procedures: Use the BCERR address to rewrite the tag with good parity 
and a cleared valid bit. Then perform the full memory error recovery procedures 
(Section 8.1.2.4). If the error reoccurs, disable both the primary cache and the primary 
tag store copy in the C-chip. 

8.6.4.3 C-Chip Bus Protocoi Error 

Description: If the cache RAM speed in the C-chip (BCCTL<two_cycle_RAMs>) and 
the G-chip (MEMCSR36<cache ram speed>) are different, the C-chip may detect a 
protocol error during memory writes or cache fill operations. BCSTS<bus_err> and 
BCSTS<status_lock> should both be set. 

Recovery procedures: Check the cache RAM speeds in the C-chip and G-chip to 
make sure that they agree. Then perform the full memory error recovery procedures 
(Section 8.1.2.3). 

8.7 Kernel Stack Not Valid Exception 

A kernel stack not valid exception occurs when a memory management exception is 
detected while attempting to push information on the kernel stack during microcode 
processing of another exception. A console halt with an error code of ERRJNTSTK 
occurs if a memory management exception is encoimtered while attempting to push 
information on the interrupt stack. 

The kernel stack not valid exception is dispatched through SCB vector OBie- The stack 
frame is as follows: 



PC 



PSL 



:{SP) 



No additional information is provided for this exception. 
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8.8 Errors Without Notification 

There are errors that do not produce explicit notification. These errors only set the error 
status bits. The next time the software inspects the register (for other reasons), it may 
want to check or log these bits. 

8.8.1 Parity Generation and Detection Philosophy 

The following list summarizes the parity generation and check characteristics of the 
KA670: 

The CPU generates parity on write data and checks parity on read data (for memory 
transactions). The CPU does not generate parity on command/address information. 

A CPU I-stream parity error is reported as an interrupt, with the appropriate bits 
set in the primary cache status register. The microcode then tries to recover with a 
D-stream read, which results in a machine check (MCHK^BUSEPtR_READ_DAL) if 
the error is hard. 

The primary cache (contained in the CPU) supports parity on botit) the tag and data 
store. 

The backup cache supports parity on both the tag and data store. On cache fills and 
writes, parity is stored and then checked by the CPU during reads. 

The G-chip detects RDAL data parity errors on writes. 

The FPU generates parity for FPU results and checks parity on JEIDAL data bus 
floating operands. 

The two DSSI interface chips (SHACs) generate parity for all CP bus DMA writes. 
The SHACs check parity on DMA reads and internal register reads. 

The network interface chip (SGEC) generates parity for all CP bus DMA writes. The 
SGEC checks parity on DMA reads and internal register reads. 

The SSC does not support parity, so the 1-kilobyte of internal battery backed-up RAM 
and the internal registers are not protected. 

The CQBIC does not support parity on the CP bus, so the bus's DMA activity and 
internal registers are not protected by parity. Note, the CQBIC does support parity 
on the Q22 bus. 

8.8.2 Microcode-Detected Error Summary 

The following list shows errors detected (triggered) by microcode checks. All the errors 
listed are described in this chapter. 

• Console halt 

— ERRJNTSTK 

— ERR_DOUBLE 

— ERR_HLTINS 

— ERRJLLVEC 

— ERR_WCSVEC 

— ERR_CHMFI 

— ERR_MCHK.ACV_TNV 
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— ERR_KSNV_ACV_TNV 

— ERR_MCHK_MCHK 

— ERR_KSNV_MCHK 

— ERR_IE_PSL26_24_101 

— ERR_IE_PSL26_24_110 

— ERR_IE_PSL26_24_111 

— ERR_REI_PSL26_24_101 

— ERR_REI_PSL26_24_110 

— ERR_REI_PSL26_24_111 

— ERR_SELFTEST_FAILED 

• Machine check 

— MCHK_FP_UNKNOWN_STATUS 

— MCHK_TBM_ACV_TNV 

— MCHK_TBH_ACV_TNV 

— MCHK_INT_ID_VALUE 

— MCHK_MOVC_STATUS 

— MCHK_UNKNOWN_IBOX_TRAP 

— MCHK_UNKNOWN_BUSERR_TRAP 

— MCHK_UNKNOWN_VECTOR_STATUS 

• Kernel stack not valid 

8.8.3 Errors Detected by Self-Tests 

There are two levels of self-test errors — power-up CPU microcode self-test, and boot 
ROM macrocode self-test. 

• A failing microcode self-test produces a halt- to- console error code of ERR_ 
SELFTEST_FAILED. 

• A failing macrocode self-test produces an error message printed at the console. The 
system is left at the »> prompt. 
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This chapter describes the KA670 functional firmware. The firmware is VAX-11 code that 
resides in EPROM on the KA670 module. The chapter covers the following major topics: 

• Firmware capabilities 

• Halt entry, halt exit, and halt dispatch 

• Power-up 

• Operating system bootstrap 

• Console service 

• Console commands 

• Diagnostics 

Typically KA670 firmware gains control whenever the onboard CPU halts, or more 
precisely, performs a processor restart operation. However, portions of the firmware can 
also be invoked by applications through a public subroutine linkage. 

When the KA670 firmware is running, it provides services expected of a standard VAX 
console subsystem. In particular, the following services are available: 

• Automatic restart or bootstrap of customer application images at power-up, on reset, 
or conditionally after processor halts. 

• Diagnostic tests executed both at power-up and by request, which verify the correct 
operation of the CPU and memory modules. 

• Operator interface providing complete examination or modification of the processor 

state. 

A more detailed description of the major components of the KA670 is provided in Section 
9.1 and a structural diagram of the KA670 firmware is given in Figure 9-1. 

Terms In This Chapter 

FirmwaK 

A generic term describing all program code in the KA670 EPROM. Sometimes, firmware 

is referred to as either the boot ROM, diagnostics ROM, or console ROM, depending on 

context. 

Virtual memory boot (VMB) or primary bootstrap 

The boot program. 

Diagnostic or self-test 

The ROM-based diagnostic program. 
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Console or console program 
The operator interface. 

9.1 Firmware Capabilities 

The KA670 firmware provides the following services: 

• Diagnostics that test all components on the board and verify the module is working 
correctly 

• Automatic/manual bootstrap of an operating system following processor halts 

• Automatic/manual restart of an operating system following processor halts 

• An interactive command language that allows the user to examine and alter the state 
of the processor 

• Support of various terminals and devices as the system console 

• Multilanguage support for displaying critical system messages and handling LK201 
country-specific keyboards 

The following sections describes in detail the functions and external characteristics of the 
KA670 firmware. 

9.2 Firmware Overview 

The KA670 firmware comprises several major functional blocks of code, as shown in 
Figure 9-1. 







Firmware 




















' 


' 


' 


1 Halt Entry | 
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Figure 9~i KA670 Finnware Stnictural Components 

The halt entry code is entered following system halts, resets, or severe errors. Basically, 
this code is responsible for saving the machine state and transferring control to the 
firmware dispatcher. The halt dispatcher determines the nature of the halt, then 
transfers control to the appropriate code. The halt exit code is entered whenever a 
transition is desired from a halted state to the running state. The hallt exit code performs 
a restoration of the saved context prior to the transition. Section 9.3 describes the halt 
codes. 

The ROM-based diagnostics consist of functional component diagnostics invoked hy a 
diagnostic executive at power-up or by the TEST command from the console. These 
functions are described in Sections 9.4 (power-up) and 9.9 on diagnoslics. 
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Depending on the nature of the halt and the hardware context, the firmware attempts 
either an operating system restart (Section 9.6), a bootstrap operation (Section 9,5), or 
transitions to console I/O mode (Section 9.7). 

9.3 Halt Entry, Exit, and Dispatch 

The main purpose of the halt code is to save the state of the machine on halt entry, 
invoke the dispatcher, and restore the state of the machine on exit to program I/O mode. 

9.3.1 Halt Entry— Saving Processor State 

The entry code, at physical address 20040000, is executed whenever a halt occurs. The 
processor may halt for a variety of reasons. Table J~l provides a complete list of the halt 
reasons and the associated messages. 

PR$_SAVPSL<13:8>(restart_code), IPR 43 stores the reason for the halt. PR$_SAVPC, 
IPR 42, contains the value of the PC when the processor was halted. On a powemp, 
PR$_SAVPC is undefined. 

One of the first actions of the firmware after a halt is to save the current LED code. Then 
the firmware writes an "E" to the diagnostic LEDs. This action occurs within the first 
several instructions after entering the firmware. The purpose of this action is to let the 
user know that at least some instructions have been successfully executed. 

The KA670 firmware unconditionally saves the following registers on any halt: 

• RO through R15, the general-purpose registers 

• PR$_SAVPSL, the saved PSL register 

• PR$_SCBB, the system control block base register 

• DLEDR, the diagnostic LED register 

NOTE 

The SSC programmable timer registers are not saved. In some cases, such as 

bootstrap, the firmware uses the timers, so the previous time context is lost. 

Several registers are unconditionally set to predetermined values by the firmware on any 
halt, processor initialization, or bootstrap. This action ensures that the firmware can run 
and protects the board from physical damage. 

The following registers fall into this category: 

• SSCCR, the SSC configuration register 

• ADxMCH & ADxMSK, the SSC address match and mask registers 

• CBTCR, the COAL bus timeout control register 

• TIVRx, the SSC timer interrupt vector registers 

On every halt entry, the firmware sets the console serial line baud rate based on the 
value read from the BDR register. 
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9.3.2 Halt Dispatch 

The action that the firmware takes on a halt depends primarily on the following 
information: 



• The I Break I enable switch, BDR<7>(halt_enable). 



• The console program mailbox, CPMBX<l:0>(halt_action). 

• The user-defined halt action (SET HALT). 

• The halt code, PR$_SAVPSL<13:8>(restart_code). 



In general, the | Break | enable switch governs whether or not the KA6170 recognizes a 
break condition from the console serial line. The switch also determines the default 
action taken on a power-up or other internal halt condition. If breaks are enabled, the 
firmware enters the console by default. If breaks are disabled, the fii-mware attempts a 
recoveiy operation. 

Operating systems can use t he con sole program mailbox, CPMBX<l:0>(halt_action) 
(Figure H-2) to override the | Break | enable switch setting and instruct the firmware to 
enter the console service, attempt to restart the operating system, or reboot the system 
following a halt. 

The user can also specify a default halt action with the SET HALT console command 
((Section 9.8), in case the operating system or user application does not set the console 
program mailbox. This command allows users to specify autobooting on power-ups, even 
when breaks are enabled. For HALT instructions and error halt conditions, the SET 
HALT command is similar in function to the console program mailbox; however, the 
command has lower precedence and is only used when the console program mailbox is 0. 

The halt (or restart) code is automatically deposited in PR$_SAVPSl><13:8>(restart_ 
code) on any halt condition. This field indicates the cause of the halt and of dispatching 
collapses, in three categories: 

02: External halts 

03: Reset/power-up 

xx: HALT instruction and all error halts 

Table 9-1 summarizes the action taken on all halt conditions except external halts, which 
are described in Section 9.3.2.1. The actual halt dispatch state machine is described in 
detail in Section I.l. 



Table 9-1 Halt Action Summary 



Reset/ 

Power- 

Up 

or Halt 



I 



Break 
nable 
Switch 



User- 
Defined 
Halt 
Action 



Operating 

System 
Mailbox 
Halt 
Action 



0,1,3 



AotionCs) 



Diagnostics, console. 



T = a reset or power-up condition. 

F = a HALT instruction or error halt condition. 

X = don't care. 
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Table 9-1 (Cont.) Halt Action Summary 









Operating 




Reset/ 




User- 
Defined 
Halt 
Action 


System 
Mailbox 
Halt 
Action 




Power- 


[Break 




Up 

or Halt 


Enable 
Switch 


Action(s) 


T 


1 


2,4 


X 


Diagnostics. If successfiil, boot. If either 
fails, console. 


T 





X 


X 


Diagnostics. If successful, boot. 11 either 
fails, console. 


F 


1 








Console. 


F 











Restart. If this fails, boot. If boot fails, 
console. 


F 


X 


1 





Restart. If restart fails, console. 


F 


X 


2 





Boot. Ifboot fails, console. 


P 


X 


3 





Console. 


F 


X 


4 





Restart. If restart fails, boot. Ifboot fails, 
console. 


F 


X 


X 


1 


Restart. If restart fails, console. 


F 


X 


X 


2 


Boot. Ifboot fails, console. 


F 


X 


X 


3 


Console. 



T = a reset or power-up condition. 

F = a HALT instruction or error halt condition. 

X = don't care. 



Because the KA670 does not support battery backed-up main memory, an operating 
system restart operation is not attempted on a power-up. 

9.3.2.1 External Halts 

The following conditions can trigger an external halt (PR$_SAVPSL<13:8>(restart_code) 
= 2). Different actions are taken, depending on the condition. 



A break condition on the system console serial line, if ttie [Break] enable switch is set 
to enabled (BDR<7>(halt_enable) = 1). As a result, the console is entered. 

You can use the S SET CONTROLP ENABLE console command to estabUsh 



^ ^ as the break condition. 



The assertion of the BHALT line on the Q22-bus, if the SCR<14>(BHALT_ENABLE) 
bit in the CQBIC is set. As a result, the console is entered. 

Negation of DCOK on the Q22-bus, if the SCR<7>(DC0K_ACTI0N) bit is set. (By 
default this bit is clear.) As a result, the console is entered. 
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Recognition of a valid MOP BOOT message by an appropriately initialized SGEC, if 
the remote_boot_enable jumper is in place (BDR<31>(remote_boot_enable) = 1). As a 
result, a bootstrap is attempted. If the bootstrap fails, the console is entered. 

NOTE 

The firmware does not initialize the SGEC for this operation. The operating 

system must set up the SGEC to support this feature. 



Restart Button 



Pushing the Restart | button typically initiates a power-up sequence and destroys system 



state. The [Restart [ button negates DCOK. The negation of DCOK maiy also be asserted 
by the DEQNA sanity timer, or any other Q22-bus module that chooses to implement 
the Q22-bus restart/reboot protocol. Since the SCR<7>(DC0K_ACTI()N) bit is cleared on 
power-up, the default action after deasserting DCOK is to generate a processor restart. 

9.3.3 Halt Exit— Restoring the Processor State 

When the firmware exits, it uses the saved context currently defined. This context is 
initially determined by what was saved on entry to the firmware. Thie context may be 
modified by console commands or automatic operations, such as an automatic bootstrap 
on power-up. 

When restoring the context, the firmware flushes the CPU internal cache (if enabled) and 
invalidates all translation buffer entries by using the internal processor register PR$ 
TBIA, IPR 57. 

In restoring the context, the console pushes the user's PSL and PC onto the user's 
interrupt stack, then executes an REI from that stack. This action Jmiplies that the user's 
ISP is valid before the firmware can exit. This is done automatically on a bootstrap. 
However, it is suggested that the SP be set to a valid memory location before issuing 
the START or CONTINUE command. Also, the user should validate PR$_SCBB before 
executing a NEXT command, since the firmware uses the trace trap vector for this 
fimction. At power-up, the user ISP is set to 200 le and PR$_SCBB is undefined. 

9.4 Power-Up 

This section describes the sequence of events which occurs on power-up. On a power-up, 
the KA670 firmware performs a unique set of actions, including locating and identifying 
a console device, language query, and the diagnostic coimtdown. Certain actions depend 
on the state of the mode switch on the H3604-SA panel. The switch has three settings: 
Test, Query, and Normal. 

9.4.1 identifying tiie Console Device 

The firmware tries to identify the type of console device present, so the device may be 
used to display further diagnostic progress. Normally, the console de^/ice is the device 
attached to the console serial line. In this case, the firmware send outs the device 
attributes escape sequence <ESC>[c on the console serial line to determine the type of 
terminal attached and the functions it supports. Terminals that do not respond to the 
device attributes request correctly are assumed to be hardcopy devices. 

After a console device has been identified, the firmware displays the KA670 banner 
message, similar to the following: 

KA670-A V3.0, VMB 2.11 
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The banner message contains the processor name, the version of the firmware, and the 
version of VMB. The letter code in the firmware version indicates whether the firmware 
is pre-field test (X), field test (T), or an official release (V). The first digit indicates the 
major release number, and the trailing digit indicates the minor release number. 

Next, if the designated console device supports DEC Multinational Character Set (MCS) 
and either the battery failed during power failure or the mode switch is set to Query, 
the firmware prompts for the console language. The firmware first displays the language 
selection menu (Figure 9-2). 

After the language query, the firmware invokes the ROM-based diagnostics and 
eventually displays the console prompt. 

9.4.1.1 Mode Switch Set to Test 

If the mode switch is set to Test, the console serial line external loopback test is executed. 
The purpose of this test is to verify that the console serial line connections from the 
KA670 through the H3604-SA panel are intact. 

An external loopback connector should be inserted in the serial line connector 
on the H3604-SA panel before cycling power to invoke this test. 

During this test, the firmware toggles between two states— active and passive. Each 
state lasts a few seconds and displays a different number on the LEDs. 

During the active state (about 3 seconds), the LEDs are set to 6. In this state, the 

firmware reads the baud rate and mode switch, then transmits and receives a character 

sequence. If the mode switch has been moved from the Test position, the firmware exits 

the test and continues as if on a normal power-up. 

During the passive state (about 7 seconds), the LEDs are set to 3. 

If at any time the firmware detects an error (parity, framing, overflow, or no characters). 

the firmware hangs and displays a 6 on the LEDs. 

9.4.1.2 Mode Switch Set to Query ^ ., , , . 

If the mode switch is set to Query (or the firmware detects that the battery failed during 

a power loss), the firmware queries the user for the language used for displaying critical 

system messages. 

Figure 9-2 shows the language selection menu. 

The user may select from one of the 11 supported languages. For those languages that 

do not have a unique keyboard, the menu displays supported country-specific keyboard 

variants in parentheses. If no response is received within 30 seconds, the language 

defaults to English (United States/Canada). 

The language query occurs only if the console device supports the DEC 
Multinational Character Set. Devices that do not support the character set 
(such as the VTIOO terminal), default to English (United States/Canada). 

After this inquiry, the firmware proceeds as if the mode switch were set to Normal. 
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1) Dansk 

2) Deutsch (Deutschland/Osterreich) 

3) Deutsch (Schweiz) 

4) English (United Kingdom) 

5) English (United States/Canada) 

6) Espafiol 

7) Fran?ais (Canada) 

8) Franpais (France/Belgique) 

9) Fran<pais (Suisse) 

10) Italiano 

11) Nederlands 

12) NorsJc 

13) Portugu^s 

14) Suomi 

15) Svens)ca 
(1..15) : 

Figure 9-2 Language Selection Menu 



9.4.1.3 Mode Switch Set to Normal 

If the mode switch is set to Normal, then the next step in the power-up sequence is to 
execute the bulk of ROM-based diagnostics. In addition to message text, the console 
displays a countdown to indicate diagnostic test progress. Figure 9-3 shows a successful 
diagnostic countdown. 



54. 


.53. 


.52. 


.51. 


.50. .49. 


.48. 


.47 


38. 


.37. 


.36. 


.35. 


.34.. 33. 


.32. 


.31 


22. 


.21. 


.20. 


.19. 


.18. .17. 


.16. 


.15 


06. 


.05. 


.04. 


.03. 


. 
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Performing normal system tests. 
62.. 61. .60. .59. .58.. 57.. 56.. 55. 
46.-45. .44.. 43.. 42.. 41.. 40. .39. 
30.. 29. .28.. 27.. 26.. 25. .24. .23. 
14. .13. .12. .11. .10. .09. .08. .07. 
Tests completed. 

Figure 9-3 Normal Diagnostic Countdown 

In the case of diagnostic failures, a diagnostic register dump is performed, similar to the 
example in Figure 9-4. The remaining diagnostics execute, and the countdown continues. 
For a detailed description of the register dump, see Section 9.9. 

Performing normal system tests. 

62 . . 61 . . 60 . . 59 . . 58 . . 57 . . 56 . . 55 . . 54 . . 53 . . 52 . . 51 . . 50 . . 4 9 . . 48 . . 47 . . 
46.. 45. .44. .43.. 42.. 41.. 40.. 39.. 38.. 37.. 36.. 35.. 34.. 33.. 32.. 31. . 
30. .29. .28. .27.. 26.. 25.. 24. .23.. 22.. 21.. 20.. 19.. 18.. 17.. 16.. 15.. 
14. .13. .12. .11. .10. .09. .08. .07.. 

?5F 2 OE FF 0000 0000 02 ; SUBTEST_5F_0E, DE_SGEC.LIS 

P1=00000000 P2=00000000 P3=5839FFO0 P4=00000000 P5-00000000 

P6=00000000 P7=00000000 P8=00000000 P9=0000080A PlO-00000003 

r0=00000054 rl=20084019 r2=00004206 r3=00000000 r4=00000000 

r5=lFFFFFFC r6=C0000003 r7=20008000 r8==00004000 EPC=00000000 
06. .05. .04 . .03. . 
Normal operation not possible. 

Figure 9-4 Abnormal Diagnostic Countdown 

If the diagnostics have successfully completed and halts are enabled, the firmware 
displays the console prompt and enters console I/O mode. 

>» 

If the diagnostics have successfully completed and halts are disabled, the firmware tries 
to boot an operating system (Figure 9-5). 

Loading system software. 

No default boot device has been specified. 

Devices: 

-DIAO (RF30) 

-DIBl (RF30) 

-MUAO (TK70) 

-EZAO (08-00-2B-03-82-78) 

Device? [EZAO] : 

(BOOT/R5:0 EZAO) 

2.. 
-EZAO 

Figure 9-5 Console Boot Display With No Default Boot Device 

9.4.2 LED Codes 

In addition to the console diagnostic countdown, the diagnostic LEDs on the KA670 
module and the H3604 console module panel display a hexadecimal value. The purpose 
of the LED display is to improve fault isolation when there is no console terminal, or 
when the hardware cannot communicate with the console terminal. Table 9-2 lists all 
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LED codes and the associated actions performed at power-up. The LED code is changed 
before the corresponding test or action is performed. 

Table 9-2 LED Codes 

LED ~" 

Display Actions 



F Initial state on power-up, no code has executed. 

E Entered ROM, some instructions have executed. 

D Waiting for power to stabilize (POK). 

C SSC RAM, SSC registers, and ROM checksum tests. 

B Primary cache, interval timer, and virtual mode tests. 

A PPA tests. 

9 Backup cache, primary cache, and memory tests. 

8 G-chip, memory, and I/O interaction tests. 

7 CQBIC (Q22-bus) tests. 

€ Console loopback tests. 

5 SHAG DSSI subsystem tests. 

4 SGEC Ethernet subsystem tests. 

3 Console I/O mode. 

2 Control passed to the VMB. 

1 Control passed to the secondary bootstrap. 

Program I/O mode, control passed to the operating system. 

9.5 Operating System Bootstrap 

Bootstrapping is the process of loading and transferring control to an operating system. 
The KA670 supports bootstraping of the following operating systems:: VAXAHMS and 
VAXELN. The KA670 will also boot MDM diagnostics and any user application image 
that conforms to the boot formats described in this manual. 

On the KA670, a bootstrap occurs when (1) a BOOT command is issued at the console, or 
(2) when the processor halts and the conditions specified in the T&ble 9-1 for automatic 
bootstrap are satisfied. 

9.5.1 Preparing for the Bootstrap 

Before dispatching to the primary bootstrap (VMB), the firmware initializes the system 
to a known state. The initialization sequence is as follows: 

1. Check CPMBX<2>(BIP). If the bit is set, the bootstrap fails. 

2. If this is an automatic bootstrap, print the message Loading system software, on 
the console terminal. 

3. Validate the boot device name. If none exists, supply a list of available devices and 
prompt the user for a device. If no device is entered within 30 seconds, use EZAO. 
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4. Write a form of this BOOT request including the active boot flags and boot device on 
the console. For example: (boot/R5:0 duao). 

5. Set CPMBX<2>(BIP). 

6. Initialize the Q22-bus scatter/gather map. 

a. Set IPCR<8>(AUX_HLT). 

b. Clear IPCR<5>{LMEAE). 

c. Perform an UNJAM command. 

d. Map all vacant Q22-bus pages to the corresponding page in local memory and 
validate each entry if that page is good. 

e. Perform an INIT command. 

f. Set IPCR<5>(LMEAE). 

7. Validate the PFN bitmap. If invalid, rebuild it. 

8. Search for a 128-kilobyte contiguous block of good memory, as defined by the PFN 
bitmap. If a block cannot be found, the bootstrap fails. 

9. Initialize the general-purpose registers: 

RO = address of descriptor of the boot device name, or if no device is specified. 

R2 = length of PFN bitmap in bytes. 

R3 = address of PFN bitmap. 

IW = time of day from PR$_TODR at power-up. 

R5 = boot flags. 

RIO = halt PC value. 

Rll = halt PSL value (without halt code and map enable). 

AP = halt code. 

SP = base of the 128-kilobyte good memory block + 512. 

PC = base of the 128-kilobyte good memory block + 512. 

Rl, R6, R7, R8, R9, FP =0. 

10. Copy the VMB image from EPROM to local memory, beginning at the base of the 
128-kilobyte good memory block + 512. 

11. Exit from the firmware to memory-resident VMB. 

On entry to VMB, the processor is running at IPL 31 on the interrupt stack, with memor>- 
management disabled. Also, local memory is partitioned as shown in Figure 9-6. 
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Base 
Base+512(SP.PC) 



PFN Bitmap 



QMR Base 



Top of Memory 



Potential Bad Memory 



Reserved for RPB, Initial Stack 



VMB Image 



Balance of 1 28 Kbyte Block 
— Used for SCB. stack, 
and the Secondary Bootstrap 



1 



256 Pages tor VMB 
128 Kbyte Block of 
Good memory 
(Page-Aligned) 



Unused Memory 



PFN Bitmap 

(Always on Page Boundary) 



Firmware Scratch Memory 

(Balance Between Bitmap and QMRs) 



Q22~bus Scatter/Gather Map 
(Always on 32 Kbyte Boundary) 



Up To 256 Pages 



64 Pages 
.J 



Potential Bad Memory 



Figure 9-6 Memory Layout Before VMB Entry 

9.5.1.1 Boot Devices 

The KA670 firmware passes the address of a descriptor of the boot device name to VMB 

through RO. The device name used for the bootstrap operation is any of the following: 

• The local Ethernet device, EZAO, if no default boot device has been specified 

• The default boot device specified at initial power-up or with a SEII* BOOT command 

• The boot device name explicitly specified in a BOOT command line 

The device name may be any arbitrary character string, with a maximum length of 
17 characters. For longer strings the console prints an error message. Otherwise, the 
console makes no attempt at interpreting or validating the device name. T^e console 
converts the string to all uppercase and passes to VMB the address of a string descriptor 
for the device name in RO. 
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Table 9-3 lists supported devices and their corresponding boot device names used in 
BOOT commands. 



Table 9-3 KA670 Supported Boot Devices 



Boot Name* 


Controller TVpe 


Device lypeCs) 




Disk: 








[node$]DIAn 


On-board DSSI 


RF30, RF71 




DUcn 


RQDX3 MSCP 


RD52, RD53, RD54, RX33, RX50 






KDA50 MSCP 


RA70, RA80, RA81, RA82, RA90 






KFQSA MSCP 


RP30, RF71 






KLESI 


RC25 




DLcn 


RLV12 


RLOl, RL02 




Tape: 


[node$]MIAn 


On-board DSSI 






MUcn 


TQK50 MSCP 


TK50 






TQK70 MSCP 


TK70 






KFQSA MSCP 








KLESI 


TU81E 




Network: 








EZAO 


On-board Ethernet 






XQcn 


DEQNA 








DELQA 








DESQA 






PROM: 








PRAO 


MRVll 






PRBO 


On-board EPROM 








• Boot device names consist of at least a two-letter device code, followed by a single diaracter controller letter 
(A Z) and ending in a device unit number (0...65536). DSSI device names may optionally mclude a node 
prefix,' consisting of either a node number {0...7) or a node name (a string of up to 8 characters), endmgin with 



NOTE 

Table 9-3 presents a definitive Ust of boot devices that the KA670 supports. 

However, the KA670 wfll likely boot other devices that adhere to the MisCP 

standards. 
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9.5.1^ Boot Flags 

The action of VMB is qualified by the value passed to it in R5. R5 contains boot flags 
that specify conditions of the bootstrap. The firmware passes to VMB either the R5 
value specified in the BOOT command or the default boot flag value sjpecified with a SET 
BFLAG command. 

Figure 9-7 shows the location of the boot flags used by VMB in the boot flag longword. 



3 2 
1 8 




9 


8 




6 


6 


4 


3 







1 TOPSYS 




H 


S 




1 


B 


D 


B 




C 



Figure 9-7 VMB Boot Flags (/R5:) 



Field Name 



Description 




3 

4 
5 
6 

8 

9 
31:28 



RPB$V_ 
CONY 

RPB$V_ 
BBLOCK 



RPB$V_DIAG 



RPB$V_ 
BOOBPT 

RPB$V 
HEADER 



RPB$V_ 
SOLICT 

RPB$V_ 
HALT 

RPB$V_ 
TOPSYS 



Conversational bootstrap. 

Secondary bootstrap from bootblock. When this bit is set, VMB reads 
logical block number of the boot device and tests it for conformance 
with the bootblock format. If in conformance, the block is executed to 
continue the bcmtstrap. No attempt to perform a lPiles-11 bootstrap is 
made. 

Diagnostic bootstrap. When this bit is set, the losid image requested 
over the network is [SYS0.SYSMAINT1DIAGBOOT.EXE. 

Bootstrap breakpoint. If this flag is set, a breakpoint instruction is 
executed in VMB and control is transferred to XDELTA prior to boot. 

Image header. If this bit is set, VMB transfers control to the address 
specified by the file's image header. If this bit is not set, VMB transfers 
control to the first location of the load image. 

File name solicit. When this bit is set, VMB prompts the operator for 
the name of the application image file. A maximum of a 39 character 
file specification is permitted. 

Halt before transfer. When this bit is set, VMB halts before 
transffering control to the application image. 

This field can be any value fixjm through P. "niiij flag changes the 
top level directory name for the system disks with multiple operating 
systems. For example, if TOPSYS is 1, the top level directory name is 
[SYSl...]. 



NOTE 



This does not apply to network bootstraps. 



9.5.2 Primary Bootstrap, Virtual Memory Boot 

Virtual memory boot (VMB) is the primary bootstrap for booting VAX processors. On the 
KA670, VMB is resident in the firmware. VMB is copied into main memoiy before control 
is transferred to it. VMB then loads the secondary bootstrap image and transfers control 
to that image. 
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NOTE 

In certain cases, such as VAXELN systems, VMB actually loads the operating 
system directly. However, for the purpose of this discussion secondary bootstrap 
refers to any VMB-loadable image. 

VMB inherits a well-defined environment and is responsible for further initialization. 
The following list summarizes VMB's operation: 

1. Initialize a two-page SCB on the first page boundary above VMB. 

2. Allocate a three-page stack above the SCB. 

3. Initialize the restart parameter block (RPB) (Table 1-2). 

4. Initialize the secondary bootstrap argument list (Table 1-3). 

5. If not a PROM boot, locate a minimum of three consecutive valid QMRs. 

6. Write 2 to the diagnostic LEDs and display 2 . . on the console, to indicate that VMB 
is searching for the device. 

7. Optionally, solicit from the console a Bootfile: name. 

8. On the console, write the name of the boot device from which VMB will attempt to 
boot. For example: -duao. 

9. Copy the secondary bootstrap from the boot device into local memory above the stack. 
If this fails, the bootstrap fails. 

10. Write i to the diagnostic LEDs and display i . . on the console, to indicate that VMB 
has found the secondary bootstrap image on the boot device and has loaded the image 
into local memory. 

11. Clear CPMBX<2>(BIP) and CPMBX<3>(RIP). 

12. Write to the diagnostic LEDs and display o . . on the console, to indicate that VMB 
is now transferring control to the loaded image. 

13. Transfer control to the loaded image with the following register usage: 

R5 = transfer address in secondary bootstrap image. 
RIO = base address of secondary bootstrap memory. 
Rll = base address of RPB. 

AP = base address of secondary boot parameter block. 
SP = current stack pointer. 

If the bootstrap operation fails, VMB relinquishes control to the console by halting with a 
HALT instruction. 

VMB makes no assumptions about the location of Q22-bus memory. However, VMB 
searches through the Q22-bus map registers (QMRs) for the first QMR marked as valid. 
VMB reqviires a minimum of 3 and a maximum of 129 contiguous valid maps to complete 
a bootstrap operation. If the search exhausts all map registers or there are fewer than 
the required number of vaUd maps, a bootstrap cannot be performed. It is recommended 
that a suitable block of Q22-bus memory address space be available (unmapped to other 
devices) for proper operation. 

The following is a sample console display of a successful automatic bootstrap: 
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Loading system software. 
{BOOT/R5:0 DUAO) 

2.. 

-DUAO 
1..0. . 



After a successful bootstrap operation, control is passed to the secondary bootstrap image, 
with the memory layout as shown in Figure 9-8. 



Base 

Base -fS 12 (SP) 

Next Page 
Next Page +1024 
Next Page -f 2560 



Potential Bad Memory 



RPB 



VMS Image 



SCB (2 pages) 



Stack (3 pages) 



Secondary Bootstrap Image 
(Potentially Exceeds Block) 



256 Pages for VMB 
128 Kbyte Block of 
Good Memory 
(Page-Aligned) 



PFN Bitmap 



QMR Base 



Top of Memory 



Unused Memory 



PFN Bitmap 

(On a Page Boundary) 



Firmware Scratcfi Memory 

(Balance Between Bitmap and QMRs) 



Q22-bu& Scatter/Gather Map 
(Always on 32-Kbyte Boundary) 



Up To 256 Pages 



Potential Bad Memory 




Figure 9-B Memory Layout at VMB Exit 

In the event that an operating system has an extraordinarily large secondary bootstrap 
that overflows the 128 kilobytes of good memory, VMB loads the remsinder of tiie image 
in memory above the good block. However, if there are not enough contiguous good pages 
above the block to load the remainder of the image, the bootstrap fails. 
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9.5.3 Device-Dependent Bootstrap Procedures 

The KA670 supports bootstrapping from a variety of boot deAnces. The following sections 
describe the various device-dependent boot procedures. 

9.S.3.1 Disk and Tape Bootstrap Procedure 

The disk and tape bootstrap supports Files- 11 lookup (supporting only the ODS level 2 
file structure) or the boot block mechanism (used in the PROM boot also). Digital's VMS 
and ELN operating systems use the Files- 11 bootstrap procedure, while the ULTRIX-32 
operating system uses the boot block mechanism. 

VMB first attempts a Files- 11 lookup, unless the RPB$V_BBLOCK boot flag is set. If 
VMB determines that the designated boot disk is a Files-11 volume, VMB searches 
the volume for the designated boot program— usually [SYS0.SYSEXE1SYSBOOT.EXE. 
However, VMB can request a diagnostic image or prompt the user for an alternate file 
specification. See Section 9.5.1.2. If the boot image can't be found, VMB fails. 

If the volume is not a Files-11 volume or the RPB$V_BBLOCK boot flag was set, the boot 
block mechanism proceeds as follows: 

1. Read logical block of the selected boot device. (This is the boot block.) 

2. Verify that the contents of the boot block conform to the boot block format (Figure 
9-9). 

3. Use the boot block to find and read in the secondary bootstrap. 

4. Transfer control to the secondary bootstrap image, just as for a Files-11 boot. 
The format of the boot block must conform to that shown in Figure 9-9. 



BB-t-O: 



2 2 

4 3 



1 1 
6 5 



1 


n 


Any Value 


Low LBN 


High LBN 



(The next segment is also used as a PROM signature block.) 



3 

1 


2 2 11 
4 3 6 5 





BB+(2*n)+0: 


CHK 


k 


16 (Hex) 










Any Value. Most Likely 




BB+I2*n)+B: 


Size in Blocks of the Image 


BB+(2*n)+12: 


Load Offset 


BB+(2*n)+16: 


Offset Into Image to Start 


BB+(2*n)+20: 




Si 


im of the Previous Three Longwords 


1 



Where: 



1) the 18 (hex) indicates this is a VAX instruction set. 

2) 18 (hex) + k = the one's complement of CHK. 



Figure 9-9 Boot Block Format 
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9.5.3.2 PROM Bootstrap Procedure 

The PROM bootstrap uses a variant of the boot block mechanism. Vl^IB searches for 
a valid PROM signature block, the second segment of the boot block defined in Figure 
9-9. If PRAO is the selected device, then VMB searches through Q22-bus memory on 
16-kilobyte boundaries. If the selected device is PRBO, VMB checks the top 4096 byte 
block of the EPROM. 

At each boundary, VMB : 

1. Validates the readability of that Q22-bus memory page. 

2. If readable, checks to see if it contains a valid PROM signature block. 

If verification passes, the PROM image is copied into main memory and VMB transfers 
control to that image at the offset specified in the PROM boot block. If not, the next page 
is tested. 

NOTE 

The boot image does not have to reside in PROM. Any boot intage in Q22-bus 

memory space with a valid signature block on a 16-kilobyte boundary is a 

candidate. Indeed, the auxiliary bootstrap assumes that the image is in shared 

memoiy. 

The PROM image is copied into main memory in 127-page chunks, until the entire PROM 
is moved. All destination pages beyond the primary 128-kilobyte block are verified 
to make sure they are marked good in the PFN bitmap. The PROM must be copied 
contiguously; if all required pages cannot fit into the memory immediately following the 
VMB image, the boot fails. 

9.5.3.3 Network Bootstrap Procedure 

Whenever a network bootstrap is selected on a KA670, VMB makes continuous attempts 
to boot from the network. VMB uses the DNA maintenance operations protocol (MOP) 
as the transport protocol for network bootstraps and other network operations. (Refer 
to Appendix F for a complete description of supported MOP functions during bootstrap.) 
After a network boot is invoked, VMB turns on the designated network link and repeats 
load attempts until one of the following occurs: 

• A successful boot. 

• Fatal controller error. 

• VMB is halted from the operator console. 

The KA670 supports the loading of a standard operating system, a diagnostic ims^e, or 
a user-designated program, using network bootstraps. The default image is the standard 
operating system. However, a user may select an alternate image by setting either the 
RPB$V_DIAG bit or the boot flag longword R5 in the RPB$V_SOLICT bit Note that the 
RPB$V_SOLICT bit has precedence over the RPB$V_DIAG bit. If both bits are set, then 
the solicited file is requested. (Refer to Figure 9-7 for the use of these bits.) 

NOTE 

VMB accepts a maximum of a 39-character file specification for solicited boots. 

If the network server is running VMS, the following defaults apply to the file 

specification: 

• The directory is MOM$LOAD: 

• The file extension is .SYS 

When the defaults are used, the 39-character file specification only needs to 
specify the filename. 
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The KA670 VMB uses the MOP program load sequence for bootstrapping the module, and 
the MOP dump I load protocol type for message exchanges related to loads. Table F-1 and 
Table F-2 list the MOP message types used in the exchange. 

VMB, the requester, starts by sending a REQ_PROGRAM message in the appropriate 
envelope (Table F-3) to the MOP dump/load multicast address (Table F-4). It then waits 
for a response in the form of a VOLUNTEER message from another node on the network, 
the MOP load server. If a response is received, then the destination address is changed 
from the multicast address to the node address of the server. The same REQ_PROGRAM 
message is retransmitted to the server as an acknowledgement that initiates the load. 

Next, VMB begins sending REQ_MEM_LOAD messages in response to any of the 
following: 

• A MEM_LOAD message, while there is still more to load 

• A MEM_LOAD_w_XFER, if it is the end of the image 

• A PARAM_LOAD_w_XFER, if it is the end of the image and operating system 
parameters are required 

The load number field in the load messages serves to synchronize the load sequence. At 
the beginning of the exchange, both the requester and server initialize the load number. 
The requester only increments the load number if a load packet has been successfully 
received and loaded. This forms the acknowledgement to each exchange. 

The server resends a packet with a specific load number, until the server sees a request 
with the load number incremented. The final acknowledgement is sent by the requester, 
wit a load number equivalent to the load number of the appropriate LOAD_w_XFER 
message + 1. 

During the boot sequence, a response must be made to the REQ_PROGRAM message 
within the current timeout limit. If not, the timeout limit is increased by 4 seconds, up to 
a maximum of about 4 minutes. The initial timeout limit is 8 seconds. 

9.6 Operating System Restart 

An operating system restart is the process of bringing up the operating system from a 
known initialization state following a processor halt. This process is often called restart 
or warmstart, but should not be confused with a processor restart that results in firmware 
entry. 

On the KA670, a restart occurs if the conditions specified in Table 9-1 are satisfied. 

To restart a halted operating system, the firmware searches system memory for the 
restart parameter block (RPB), a data structure constructed by VMB for this purpose. 
See Table 1-2 for a detailed description of this data structure. If a valid RPB is found, 
the firmware passes control to the operating system at an address specified in ttie RPB. 

The firmware keeps a restart in progress (RIP) flag in CPMBX, which it uses to avoid 
repeated attempts to restart a failing operating system. An additional restart in progress 
flag is maintained by the operating system in the RPB. 

The firmware uses the following algorithm to restart the operating system: 

1. Check CPMBX<3>(RIP). If it is set, the restart fails. 

2. Print the message Restarting system software, on the console terminal. 

3. Set CPMBX<3>(RIP). 

4. Search for a valid RPB. If none is found, the restart fails. 
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5. Check the operating system RPB$L_RSTRTFLG<0>(RIP) flag. If it is set, the restart 
fails. 

6. Write o on the diagnostic LEDs. 

7. Dispatch to the restart address, RPB$L_RESTART, with the followng: 

SP = the physical address of the RPB + 512. 
AP = the halt code. 
PSL = 041F0000. 
PR$_MAPEN =0. 

If the restart is successful, the operating system must clear CPMBX<3>(RIP). 

If the restart fails, the firmware prints Restart failure, on the system console. 

9.6.1 Locating the Restart Parameter Block 

The RPB is a page-aligned control block that can be identified by the first three 
longwords. The following diagram shows the format of the RPB signature. See Table 
1-2 for a complete description of the RPB. 



RPB: +00 
+04 
+08 



Physical Address of the RPB 



Physical Address of the Restart Routine 



Checksum of First 31 Longwords of Restart Routine 



The firmware uses the following algorithm to find a valid RPB: 

1. Search for a page of memory that contains its address in the first longword. If none 
is found, the search for a valid RPB has failed. 

2. Read the second longword in the page (the physical address of the restart routine). If 
it is an invalid physical address or 0, return to step 1. The check for is necessary to 
ensure that a page of Os does not pass the test for a valid RPB. 

3. Calculate the 32-bit two's complement sum (ignoring overflows) of the first 31 
longwords of the restart routine. If the sum does not match the l^ird longword of 
the RPB, return to step 1. 

4. A valid RPB has been found. 

9.7 Console Service 

The KA670 is, by definition, halted whenever the console program is running and the >» 
prompt is displayed on the console terminal. When halted, Hie firmware provides most of 
the services of a standard VAX console (VAX Architecture Reference Manual) throu^ the 
designated system console device. The firmware also implements several commands not 
defined in the VAX Architecture Reference Manual. 
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9.7.1 Console Control Characters 

Control characters are typed by holding down the |Ctrl[ key and pressing the second key. 
In console I/O mode, several typed characters have special meanings. 



Raturn 



<x] (Rubout) 



CtTi)|A|or[Fi4i 



(Ctri|p|ortheup 
arrow (or down 
arrow) 

Si 



Ori] |d) or left 



arrow 



Odli 



[Ctri] H or right 



arrow 



[CtrillHlor 
backspace key 



F12 



oFilg 



^g 



[c^l 



@0 



ctHlll 



Ends a command line. No action is taken on a command until after it is 
terminated by a carriage return. A null line terminated by a carriage return 
is treated as a valid, null command. No action is taken, and the console 
reprompts for input. The carriage return is echoed as carriage return, line 
feed. 

When the operator types a rubout character, the console deletes the 
previously typed character. What appears on the console terminal depends 
on whether the terminal is a video terminal or a hardcopy terminal. 

• For hard copy terminals, the console echoes with a backslash ( 

Tbggles between insertion/overstrike mode for command line editing. By 
default, the console powers up in overstrike mode. 

Recall previous command(s). Command recall works only if sufficient 
memory is available. This function may then be enabled and disabled 
using the SET RECALL command. 



Causes the console to echo ^C and to abort processing of a command. Ctrl| ^ 
has no effect as part of a binary load data stream. |Ctrl| ^ clears Ctrl g and 
reenables output stopped by Ctrl ^ 

Moves the cursor left one position. 

Moves the cursor to the end of the line. 
Moves the cursor right one position. 

Moves cursor to the beginning of the line. 



Causes t he co nsole to throw awa y transmissions to the console terminal until 
the next |Ctrl| ^ is entered. |Ctrl[ ^ is echoed as '^0<CR> when it disables 
output, but IS not echoed when it reenables output. Output is reenabled if 
the console prints an error message, or if it prompts for a command from the 
terminal. Displaying a REPEAT command does not reenable output When 
outp ut is reenabled for reading a command, the console prompt is displayed. 



Ctrl S also enables output. 



Resumes output to the console tenninal. Additional |Gtrl| |Q| sequences are 
ignored. |Ctrl| ^ and |Ctrl| § are not echoed. 

Stops output to the console terminal until |Ctrl| § is typed. [Ctrll g and |Ctrl| 
^ are not echoed. 

The console echoes '^U<CR>, and deletes the entire line. If |Ctrl| Pis typed 
on an empty line, the console echoes '^U<CR> and prompts tor another 
command. 

Causes the console to echo <CR><LF> followed by the current command 
line. This function can imp rove the readability of a command line that has 
been heavily edited. When |Ctrl| |C| is t yped as part of a command line, the 
console deletes the line as it does with Ctrl| lul. 
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Break | If th e console is in console I/O mode, typing [ Break] is ijquivalent to typing 

Ctri]|Cl, and is echoed as ''C. 



NOTE 

If the local console is in program I/O mode and halts are disabled, 



Break is ignored. 



If the console is in program VO mode and halts are enabled, [Break] 
causes the processor to halt and enter console I/O mode. 

Control characters with an ASCII code less than 32io or between 128 and 159io are 
unrecognized. If an unrecognized code is typed, it is echoed as a caret C^) followed by the 
character with ASCII code 64 greater. For example, BEL (ASCII code 7) is echoed as '^G, 
since capital G is ASCII code 71 (7 + 64 = 71). 

When a control character is deleted with rubout, it is echoed the same way. After echoing 
the control character, the console processes it like a normal character. Commands with 
control characters are invalid (unless they are part of a comment), and the console 
responds with an error message. 

9.7.2 Console Command Syntax 

The console accepts commands that are up to 80 characters in length. It responds 
to longer commands with an error message. The count does not include rubbed-out 
characters or the carriage retuma at the end of a command. 

You can abbreviate commands. Abbreviations are formed by dropping characters from 
the end of a keyword, as long as the resulting keyword is still unique. Most commands 
can be uniquely expressed with their first character. 

Multiple adjacent spaces and tabs are treated as a single space by the console. Leading 
and trailing spaces and tabs are ignored. Tabs are echoed as spaces. 

Command qualifiers can appear after the command keyword, or after any symbol or 
number in the command. A qualifier is any contiguous set of non-whitespace characters 
that starts with a slash (/, ASCII code 47io). 

All numbers (addresses, data, and counts) are in hexadecimal. However, note that 
symbolic register names number the registers in decimal. The console does not 
distinguish between upper and lowercase characters in numbers or in commands; both 
are accepted. 

9.7.3 Console Command Keywords 

The KA670 firmware implements a variant of the VAX SRM console command set. 
The only commands defined in the VAX SRM and not supported by (the KA670 are 
MICROSTEP, LOAD, and @. The CONFIGURE, HELP, MOVE, SEARCH and SHOW 
command have been added to the command set to facilitate system debi^ging and access 
to system parameters. In general, however, the KA670 console is similar to other VAX 
consoles. 

Table 9—4 lists command and qualifier ke3rwords. 
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Table 9-4 Command, Parameter, and Qualifier Keywords 



Command Keywords 








Processor Control 


Data Transfer 


Console Control 




B*OOT 


D*EPOSIT 


CONF*IGURE 




C*ONTINUE 


E*XAMINE 


F*IND 




H*ALT 


M*OVE 


R*EPEAT 




INITIALIZE 


SEA*RCH 


SET 




N*EXT 


X 


SH*OW 




S*TART 




T*EST 




U*NJAM 




! 




SET and SHOW Parameter Keywords 


BO*OT 


BF*UA)G 


DE*VICE 




DS*SI 


ET*HERNET 


HA*LT 




H*OST 


L*ANGUAGE 


M*EMORY 




Q*BUS 


R*ECALL 


RL*V12 




U*QSSP 


VERS*ION 


T*RANSLATION 




Qualifier Keywords 








Data Control 


Address Space Control 


Command Specific 




/B 


/G 


/IN*STRUCT10N 




/W 


/I 


/NO*T 




/L 


/P 


/R5: or/ 




/Q 


/V 


/RP*B or /ME*M 




/N: 


M 


/F*ULL 




/ST*EP: 


/U 


/DU*P or /MA*INTENANCE 




/WR*ONG 




/DS*SI or /U*QSSP 

/DI*SKor/T*APE 

/SE*RVICE 




An asterisk (*) marks the minimal number of characters required 


to uniquely identify the keyword. 





Table 9-6 at the end of the command descriptions provides a complete summary of the 
console commands. 
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9.7.4 Console Command Qualifiers 

All qualifers in the console command syntax are global. That is, they may appear in any 
place on the command line after the command keyword. 

All qualifiers have unique meanings throughout the console, regardless of the command. 
For example, the /B qualifier always means byte. 

Table 9-7 at the end of the command section provides a summary of the qualifers 
recognized by the KA670 console. 

9.7.4.1 Command Address Specifiers 

Several commands take an address or addresses as arguments. In the context of the 
console, an address has two components — the address space, and the offset into that 
space. The console supports six address spaces: 

Physical memory (/P qualifier) 
Virtual memory (A^ qualifier) 
General-purpose registers (/G qualifier) 
Internal processor registers (/I qualifier) 
Protected memory (/U qualifier) 
PSL (/M qualifier) 

The address space that the console references is inherited from the previous console 
reference, unless explicitly specified. The initial address space reference is PHYSICAL. 

The KA670 console supports symbolic references to addresses. A symbolic reference 
simultaneously defines the address space for a given symbol. Table 9-15 lists the symbolic 
addresses supported by the console, grouped according to address space. 

Table 9-5 Console Symbolic Addresses 

Symbol Address Symbol Address Symbol Address S;|rmbol Address 
/G - General-Purpose Registers 



RO 



Rl 



R2 



R3 



00 



01 



02 



03 



R4 



R5 



R6 



R7 



04 



05 



06 



07 



R8 



R9 



RIO 



Rll 



08 


R12 
WJ>) 


oc 


09 


R13 

(IP) 


OD 


OA 


R14 

(SIP) 


OE 


OB 


RIS 

(TO) 


OP 



/M - Processor Status Longword 


PSL 


/I - Internal Processor Registers 


pr$_ksp 00 pr$_ 10 

pcbb 


pr$_rxcs 


20 


30 



All symbolic values in this table are in hexadecimal. 
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Table 9-5 (Com.) Console Symbolic Addresses 



Symbol 


Address 


Symbol 


Address 


Symbol 


Address 


Symbol 


Address 


/I - Internal Processor Registers 


pr$_esp 


01 


pi"$_ 
scbb 


11 


pr$_ 
rxdb 


21 




31 


pr$_ssp 


02 


pr$Jpl 


12 


pr$_txc8 


22 


— 


32 


pr$_usp 


03 


pr$_ 
astlv 


13 


pr$_ 
txdb 


23 


— 


33 


pr$Jsp 


04 


pr$_sirr 


14 


pr$_ 
tbdr 


24 


— 


34 




05 


pr$_sisr 


15 


pr$_ 
cadr 


25 




35 




06 




16 


pr$_ 
mcesr 


26 




36 




07 




17 


pr$_ 
mser 


27 


pr$_ 
ioreset 


37 


pr$_ 
pObr 


08 


pr$_iccr 


18 


pr$_accs 


28 


pr$_ 
mapen 


38 


pr$_p01r 


09 




19 




29 


pr$_tbia 


39 


pr$_ 
plbr 


OA 


pr$_icr 


lA 


pr$_ 
savpc 


2A 


pr$_tbi8 


3A 


pr$_pllr 


OB 


pr$_todr 


IB 


pr$_ 
savpsl 


2B 


pr$_ 
tbdata 


3B 


pr$_sbr 


OC 


— 


IC 




2C 


— 


3C 


pr$_slr 


OD 




ID 


— 


2D 




3D 




OE 




IE 


— 


2E 


pr$_8id 


3E 




OP 




IF 


pr$_ 
tbtag 


2F 


pr$_ 
tbchk 


3P 




70 


pr$_brfr 


74 


pr$_ 
bcerr 


78 


pr$_ 
pctag 


7C 


pr$_ 
hrbts 


71 


pr$_ 
bcidx 


75 


pr$_ 
bcfbts 


79 


pr$_ 
pcidx 


7D 


pr$_ 
bcplts 


72 


pr$_ 
bests 


76 


pr$_ 
bcfpts 


7A 


pr$_ 
pcerr 


7E 


pr$_ 
bq>2ts 


73 


pr$_ 

bcctl 


77 


pr$_ 
vinstr 


7B 


pr$. 
pests 


7F 


/P - Physical (VAX I/O Space) 



qbio 20000000 qbmem 

rom 20040000 eacr 

dscr 20080000 dser 

ipcrO 20001f40 ipcrl 



30000000 


qbmbr 


20080010 


— 




20084000 


bdr 


20084004 






20080004 


dmear 


20080008 


dsear 


2008000C 


20001f42 


ipcr2 


20001f44 


iperS 


20001f46 
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Table &-5 (Cont.) Console Symbolic Addresses 



Symbol 


Address 


Symbol 


Address 


Symbol 


Address 


Symbol 


Address 


IP ' Physical (VAX I/O Space) 


ssc_ram 


20140400 


88c_cr 


20140010 


ssc_cdal 


20140020 


ssc_ 
dledr 


20140030 


88C_ 

adOmat 


20140130 


ssc_ 
adOmsk 


20140134 


ssc_ 
adlmat 


20140140 


8SC_ 

adlmsk 


20140144 


8sc_tcrO 


20140100 


ssc_tirO 


20140104 


ssc_ 
tnirO 


20140108 


ssc_ 
tivrO 


2014010c 


88c_tcrl 


20140110 


ssc_tirl 


20140114 


8SC_ 

tnirl 


20140118 


ssc_ 
tivrl 


2014011c 


memcsrO 


20080100 


memcsrl 


20080104 


memcsr2 


20080108 


memcsrS 


2008010c 


inemesr4 


20080110 


memcsrS 


20080114 


memcsr6 


20080118 


m€>mcsr7 


2008011c 


memcsrS 


20080120 


memcsr9 


20080124 


memcsrlO 


20080128 


memcsrll 


2008012c 


memcsrl2 


20080130 


memcsrlS 


20080134 


memcsrl4 


20080138 


memcsrlS 


2008013c 


meincsrl6 


20080140 


memcsrl? 


20080144 


memcsrlS 


20080148 


memcsrl9 


2008014c 


memcsr20 


20080150 


memcsr2l 


20080154 


memcsr22 


20080158 


memcsr23 


2008015c 


meincsr24 


20080160 


memc8r25 


20080164 


memcsr26 


20080168 


memcsr27 


2008016c 


memcsr28 


20080170 


memcsr29 


20080174 


memcsrSO 


20080178 


memcsrSl 


2008017c 


memc8r32 


20080180 


memcsr33 


20080184 


memcsr34 


20080188 


m<)mc8r35 


2008018c 


memcsr36 


20080190 














nicsrO 


20008000 


nicsrl 


20008004 




20008008 


nk:sr3 


2000800C 


nicsr4 


20008010 


nicsrS 


20008014 


nic8r6 


20008018 


nicsr? 


2000801C 




20008020 


nicsr9 


20008024 


nicsrlO 


20008028 


nicsrll 


2000802C 


nicsrl2 


20008030 


nicsrlS 


20008034 


nicsrl4 


20008038 


nicsrl5 


2000803C 


sgec_ 
setup 


20008000 


sgec_ 
poll 


20008004 




20008008 


sg«»c_rba 


2000800C 


sgec tba 


20008010 


sgec_ 
status 


20008014 


8gec_ 
mode 


20008018 


8gec_sbr 


2000801C 


— 


20008020 


sgec_ 
wdt 


20008024 


sgec_ 
mfc 


2C008028 


sgec_ 
veirlo 


2000802C 


8gec_ 
verhi 


20008030 


sgec_ 
proc 


20008034 


8gec_bpt 


20008038 


8gec_ 
cmd 


2000803C 


shacl_ 
sswcr 


20004030 


shacl_ 
sshma 


20004044 


shacl_ 
pqbbr 


20004048 


shacl_ 
psir 


2000404c 


shacl_ 
pesr 


20004050 


shacl_ 
pfar 


20004054 


shacl_ 
ppr 


20004058 


shacl_ 
pmcsr 


2000405C 


shacl_ 
pcqOcr 


20004080 


shacl_ 
pcqlcr 


20004084 


shacl_ 
pcq2cr 


20004088 


shmcl. 
pcqScr 


2000408C 
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Table 9-5 (Cont.) Console Symbolic Addresses 



Symbol 


Address 
cal(VAXI/0 


Symbol 


Address 


Symbol 


Address 


Symbol 


Address 


/P - Physi 


Space) 












8hacl_ 
pdfqcr 


20004090 


shacl_ 
pmfqcr 


20004094 


shacl_ 
psrcr 


20004098 


8hacl_ 
peer 


2000409C 


8hacl_ 
pdcr 


200040A0 


8hacl_ 
pier 


200040A4 


8hacl_ 
pmtcr 


200040A8 


shacl_ 
pmteer 


200040AC 


8hac2_ 
sswcr 


20004230 


shac2_ 
sshma 


20004244 


shac2„ 
pqbbr 


20004248 


shac2_ 
psr 


2000424e 


8hac2_ 
pesr 


20004250 


shac2_ 
pfar 


20004254 


8hac2_ 
ppr 


20004258 


8hac2_ 
pmcsr 


2000425C 


8hac2_ 
pcqOcr 


20004280 


8hac2_ 
pcqlcr 


20004284 


8hac2_ 
pcq2cr 


20004288 


shac2_ 
pcqScr 


2000428C 


8hac2_ 
pdfqcr 


20004290 


shac2_ 
pmfqcr 


20004294 


8hac2„ 
psrcr 


20004298 


8hac2_ 
peer 


2000429C 


8hac2_ 
pdcr 


200042A0 


shac2_ 
pier 


200042A4 


shac2„ 
pmtcr 


200042A8 


shac2_ 
pmteer 


200042AC 


8hac_ 
sswcr 


20004230 


8hac_ 
sshma 


20004244 


shac_ 
pqbbr 


20004248 


shac_ 
psr 


2000424c 


8hac_ 
pesr 


20004250 


shac_ 
pfar 


20004254 


8hac_ 
ppr 


20004258 


8hac_ 

pmcsr 


2000425C 


8hac_ 
pcqOcr 


20004280 


8hac_ 
pcqlcr 


20004284 


shac_ 
pcq2cr 


20004288 


8hac_ 
pcq3er 


2000428C 


8hac_ 
pdfqcr 


20004290 


shac_ 
pmfqcr 


20004294 


shac_ 
psrcr 


20004298 


shac_ 
peer 


2000429C 


Bhac_ 
pdcr 


200042A0 


shac_ 
pier 


200042A4 


shac_ 
pmtcr 


200042A8 


shac_ 
pmteer 


200042AC 


Any Address Space 


* (aster- 
isk) 


The last location successfully referenced in an ] 


EJXAMINE or DEPOSIT command. 


+ (plus 
sign) 


The location immediately following the last location successfiilly referenced in an 
EXAMINE or DEPOSIT command. For references to physical or virtual memory 
spaces, the location referenced is the last address, plus the size of the last reference 
(1 for byte, 2 for word, 4 for longword, 8 for quadword). For other address spaces, the 
address is the last address referenced plus one. 


-(hy. 
phen) 


The loTHtion immediately preceding the last location successfully referenced in an 
EXAMINE or DEPOSIT command. For references to physical or virtual memoiy 



® 



for byte, 2 for word, 4 for longword, 8 for quadword). For other address spaces, the 
address is the last addressed referenced minus one. 

The location addressed by (lie last location successfully referenced in an EXAMINE or 
DEPOSIT command. 
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9.7.5 References to Processor Registers and Memory 

The KA670 console is implemented by macrocode executing from EPROM. The console 
command interpreter cannot modify actual processor registers. When the console is 
entered, the console saves the processor registers in console memory. All command 
references to the processor registers are directed to the corresponding saved values, not 
to the registers themselves. 

When the console reenters program I/O mode, the saved registers are restored and 
any changes become operative only then. References to processor memory are handled 
normally. The binary load and unload command can not reference the console memory 
pages. 

The following registers are saved by the console. Any direct reference to these registers 

is intercepted by the console, directing access to the saved copies. 

R0...R15 General -purpose registers 

PR$_IPL Interrupt priority level register 

PR$_SCBB System control block base register 

PR$_ISP Interrupt stack pointer 

PR$MAPEN Memory management enable register 

The following registers are also saved, yet may be accessed directly through console 
commands. Writing values to these registers may make the console inoperative. 

PR$_SAVPC Halt PC 

PR$_SAVPSL Halt PSL 

ADxMCH/ADxMSK SSC address decode and match registers 

SSCCR SSC configuration register 

DLEDR SSC diagnostic LED register 

9.8 Console Commands 

The following sections define the commands accepted by the console, when it is in console 
I/O mode. 

Syntax Conventions 

The following conventions are used to describe command syntax: 
[ ] Enclose optional command elements. 

{ } Enclose a command element. 

Indicates a series of command elements. 

The console allows you to override the default radix by using the following commands: 

%d Decimal (For example, %dl234) 

%x Hexadecimal (For eample, %xFEEBFCEA) 

%b Binary (For example, %bl001) 

%o Octal (For example, %ol070) 

The following is an example of a console EXAMINE command ^at sp(3cifies a decimal 
value for the /N qualifier: 

»>EX/L/P/N:%dl023 
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BOOT 
Format 

BOOT [quaimer] [{boot_devlce}[:JJ 

Qualifiers 

/R5:{boot flags} 

The boot flags value is a 32-bit hexadecimal value passed to VMB in R5. The console does 
not interpret this value. Figure 9-7 lists the bit assignments of R5. To specify a default 
boot flags longword, use the SET BFLAG command. To display the default setting, use 
the SHOW BFLAG command. 

/{bootjiags} 

Equivalent to the form above. 

Arguments 

[{boot device}] 

The boot device name may be any arbitrary character string, with a maximum length 
of 17 characters. Longer strings cause the console to issue a val too big error message. 
Otherwise, the console makes no attempt at interpreting or validating the device name. 
The console converts the string to uppercase and passes VMB a string descriptor in RO to 
this device name. 

lb specify a default boot device, use the SET BOOT command. To display the name of 
the default device, use the SHOW BOOT command. The factory default is the Ethernet 
device, EZAO. 

Description 

The console initializes the processor and transfers execution to VMB. VMB tries to boot 
the operating system from the device specified by the BOOT command. If no device is 
specified, VMB tries to boot from the default device. The console qualifies the bootstrap 
operation by passing a boot flags value to VMB in R5. See Section 9.5 for a detailed 
description of the bootstrap process and how the default bootstrap device is determined. 

If you do not specify a device name or qualifiers with the BOOT command, the default 
values are used. Explicitly stating the boot flags value or the boot device overrides the 
current default value for the current boot request, but does not change the default value 
stored in battery backed-up RAM (BBU RAM). 

There are three ways to set the default boot device and and boot flags value: 

• The operating system may write a default boot device and flags into the appropriate 
locations in BBU RAM (Appendix H ). 

• The user may explicitly set the default boot device and boot flags with the console 
SET BOOT and SET BFLAG commands. 

• Under any of the following conditions, the console prompts the user for the default 
boot device 

- The power-up mode switch is set to query mode. 
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- The console detects that the battery failed, which means the contents of BBU 
RAM are no longer valid. 

- The console detects that the default boot device has not been explicitly set by the 
user. Either a previous device query timed out and defaulted to EZAO (SGEC) or 
neither of the above two methods has been performed. Simply stated, the console 
prompts the user for a default boot device at every power-up, until such a request 
has been satisfied. 

If no default boot device is specified in BBU RAM, the console issues a list of potential 
bootable devices at power-up and queries the user for a device name. If no device name 
is entered within 30 seconds, EZAO is used. However, EZAO does not become the default 
boot device. 

Examples 

»>SHOW BOOT 

DUAO 

»>SKOir BTIAG 



»>B ! Boot using default boot flags and device. 

(BOOT/R5:;0 DUAO) 

2.. 

-DUAO 

»>B0 EZAO ! Boot using default boot flags and specified device. 

(BOOT/R5:0 EZAO) 

2. . 

-EZAO 

»>BOOT/10 ! Boot using specified boot flags and default device. 

(BOOT/R5:10 DUAO) 

2. . 

-DUAO 

»>BOOT /R5:220 EZAO ! Boot using specified boot flags and device. 
(BOOT/R5:220 EZAO) 

2. . 

-EZAO 
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CONFIGURE 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

CONFIGURE is similar to the VMS SYSGEN CONFIG utility. This feature simplifies 
system configuration by providing information that is typically available only with a 
running operating system. 

The CONFIGURE command invokes an interactive mode that permits the user to enter 
Q22-bus device names, then generates a table of Q22-bus I/O page device CSR addresses 
and device vectors. 



Examples 



>»eonrigur« 














Enter device 


configuration 


, HELP, or 


EXIT 






Device , Number 


? HELP 












Devices: 














LPVll 


KXJll 




DLVllJ 


DZQll 


DZVll 


DFAOl 


RLV12 


TSV05 




RXV21 


DRVl IW 


DRVl IB 


DPVll 


DMVll 


DELQA 




DEQNA 


DESQA 


RQDX3 


KDA50 


RRD50 


RQC25 




KFQSA-DISK 


TQK50 


TQK70 


TU81E 


RV20 


KFQSA-TAPE 


KMVll 


lEQll 


DHQll 


DHVll 


CXA16 


CXB16 




CXY08 


VCBOI 


QVSS 


LNVll 


LNV21 


QPSS 




DSVll 


ADVllC 


AAVllC 


AXVllC 


KWVllC 


AD VI ID 




AAVllD 


VCB02 


QDSS 


DRVllJ 


DRQ3B 


VSV21 




IBQOl 


IDVllA 


IDVllB 


IDVllC 


IDVllD 


lAVl lA 




lAVllB 


MIRA 


ADQ32 


DTC04 


DESNA 


IGQll 




DIV32 


KIV32 


DTCN5 


DTC05 


KWV32 


KZQSA 












Numbers: 














1 to 255, default is 


1 










Device, Number 


? RDASO 












Device, Number 


? KFQSA 












Device is ambiguous 












Device, Number 


? KFQSA- 


DISK 










Device, Number 


? KFQSA- 


TAPE 










Device, Number 


:? CXY08 












Device, Number 


■? CXA16 












Device, Number 


:? EXIT 
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Address/Vector Assignments 
-772150/154 KDA50 
-760334/300 KFQSA-DISK 
-774500/260 KFQSA-TAPE 
-760500/310 CXY08 
-760520/320 CXA16 
»> 



Console Commands 279 
CONTINUE 



CONTINUE 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

The processor begins instruction execution at the address currently contained in the 
program counter. The processor is not initialized. The console enters program I/O mode. 
Internally, the CONTINUE command pushes the user's PC and PSL onto the user's ISP, 
then executes an REI instruction. This action implies that the user's ISP is pointing to 
some valid memory. 

Examples 

»>CONTINUE 
>» 
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DEPOSIT 
Format 

DEPOSIT [quallfierjlst] {address} {data} [{data}...] 

Qualifiers 

IB 
The data size is a byte. 

/W 
The data size is a word. 

/L 
The data size is a longword. 

/Q 
The data size is a quadword. 

/G 

The address space is the general-purpose register set, RO to R15. The data size is always 
long. 

/I 

The address space is the internal processor registers (IPRs). These are the registers 
accessible only by the MTPR and MFPR instructions. The data size is always long. 

/M 
The address space is the processor status longword (PSL). 

IP 
The address space is physical memory. 

/V 

The address space is virtual memory. All access and protection-checking occurs. If the 
access would not be allowed to a program running with the current PSL, the console 
issues an error message. Virtual space DEPOSITS cause the PTE<M> bit to be set. If 
memory mapping is not enabled, virtual addresses are equal to physical addresses. 

AJ 

Access to console private memory is allowed. This qualifier also disables virtual address 
protection checks. On virtual address writes, the PTE<M> bit is not se* if the /U qualifier 
is present. This qualifier is not inherited, and must be respecified on each command. 

/N:{count} 

The address is the first of a range. The console deposits to the first address, then to the 
specified number of succeeding addresses. Even if the address is the siymbolic address 
"-", the succeeding addresses are at larger addresses. The symbolic address specifies only 
the starting address, not the direction of succession. For repeated references to preceding 
addresses, use the command REPEAT DEPOSIT - <DATA> . 
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/STEP:{slze} 

The number to add to the current address. Normally this defaults to the data size, but is 
overriden by the presence of this qualifier. This qualifier is not inherited. 

/WRONG 

The ECC bits for this data are forced to the value of 3. ECC bits with a value of 3 always 
generate a double-bit error). 

Arguments 

{address} 

A long word address that specifies the first location into which data is deposited. The 
address can be any legal address specifier as defined in Section 9.7.4.1 and Table 9-5. 

{data} 

The data to be deposited. If the specified data is larger than the deposit data size, 
the console ignores the command and issues an error response. If the specified data is 
smaller than the deposit data size, it is extended on the left with Os. 

[{data}} 

Additional data to be deposited (up to a maximum of six values). 

Description 

This command deposits the data into the address specified. If you do not specify an 
address space or data size qualifiers, the defaults are the last address space and data 
size used in a DEPOSIT, EXAMINE, MOVE or SEARCH command. After processor 
initialization, the default address space is physical memory, the default data size is a 
longword, and the default address is 0. If conflicting address space or data sizes are 
specified, the console ignores the command and issues an error response. 

Examples 

»>D/P/B/N:1FF ! Clear first 512 bytes of physical memory. 

»>D/V/L/ll:3 1234 5 ! Deposit 5 into four longwords starting at 

virtual memory address 1234. 
»>D/N:8 RO FFFFFFFF ! Loads GPRs RO through R8 with -1. 

»>D/H:200 - 

! Starting at previous address, clear 513 bytes. 

>»D/L/P/M:10/S:200 8 ! Deposit 8 in the first longword of 

the first 17 pages in physical memory. 

>» 
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EXAMINE 
Format 

EXAMINE [quallfierjlstj [{address}] 

Qualifiers 

/B 
The data size is a byte. 

/W 
The data size is a word. 

/L 
The data size is a longword. 

/Q 
The data size is a quadword. 

/G 

The address space is the general-purpose register set, RO to R15. The data size is always 
long. 

/I 

The address space is the internal processor registers (IPRs). These are the registers 
accessible only by the MTPR and MFPR instructions. The data size is always long. 

/M 
The address space is the processor Status longword (PSL). 

IP 

The address space is physical memory. Note that when virtual memory is examined, the 
address space and address in the response are the translated physical address. 

/V 

The address space is virtual memory. All access and protection-checking occur. If the 
access would not be allowed to a program running with the current PSL, the console 
issues an error message. If memory mapping is not enabled, virtual addresses are equal 
to physical addresses. 

/M 
The address space and display are the PSL. The data size is always long. 

/U 

Access to console private memory is allowed. This qualifier also disables virtual address 
protection checks. This qualifier is not inherited, so it must be respecified with each 
command. 

/N:{count} 

The address is the first of a range. The console deposits to the first address, then to the 
specified number of succeeding addresses. Even if the address is the symbolic address 
"-", the succeeding addresses are at larger addresses. The symbolic address specifies only 
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the starting address, not the direction of succession. For repeated references to preceding 
addresses, use the command REPEAT EXAMINE - <DATA>. 

/STEP:{size} 

The number to add to the current address. Normally this defaults to the data size, but is 
overriden by the presence of this qualifier. This qualifier is not inherited. 

/WRONG 

ECC errors on this read access to main memory are ignored. If specified, the ECC bits 
actually read are displayed in parentheses following the data. In the case of quadword 
and octaword data, the ECC bits shown apply to the most significant longword only. 

/INSTRUCTION 

Disassemble and display the VAX Macro-32 instruction at the specified address. 

Arguments 

[{address}] 

A longword address that specifies the first location to be examined. The address can be 
any legal address specifier as defined in Section 9.7.4.1 and Table 9-5. If no address is 
specified, "+" is assumed. 

Description 

This command examines the contents of the memory location or register specified by the 
address. If no address is specified, "+" is assumed. The display line consists of a single- 
character address specifier, the hexadecimal physical address to be examined, and the 
examined data also in hexadecimal. 

EXAMINE uses the same qualifiers as DEPOSIT. However, the AVRONG qualifier 
causes EXAMINE to ignore ECC errors on reads from physical memoiy. EXAMINE 
also supports an /INSTRUCTION qualifier that will disassemble instructions at the 
current address. 
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Examples 



>»EX PC 

G OOOOOOOF FFFFFFFC 

>»EX SP 

G OOOOOOOE 00000200 

»>EX PSI. 

M 00000000 O41FO0O0 

»>E/M 

M 00000000 O41FO000 

>»E R4/N:5 

G 00000004 00000000 
G 00000005 00000000 
G 00000006 00000000 
G 00000007 00000000 
G 00000008 00000000 
G 00000009 801D9000 

»>EX PR$_SCBB 

I 00000011 2004A000 

»>E/P 

P 00000000 00000000 

»>EX /INS 20040000 



P 20040000 


11 


BRB 


20040019 


>»EX /IHS/N: 


5 20040019 




P 20040019 


DO 


MOVL 


I"#20140000, @#20140000 


P 20040024 


D2 


MCOML 


@#20140030,@#20140502 


P 2004002F 


D2 


MCOML 


S'-#0E,@#20140030 


P 20040036 


7D 


MOVQ 


R0,@#201404B2 


P 2004003D 


DO 


MOVL 


I'^#201404B2,R1 


P 20040044 


DB 


MFPR 


S'^#2A,B"44(R1> 


>»E/IIIS 








P 20040048 


DB 


MFPR 


S*#2B,B''48(R1> 


»> 








>» 








>» E 








P 00000000 








»> E * 








P 00000000 









! Examine the PC. 

! Examine the SP . 

! Examine the PSL. 

! Examine PSL another way. 

! Examine R4 through R9 . 



! Examine the SCBB, IPR 17. 
! Examine local memory 0. 
! Examine 1st byte of EPROM. 
! Disassemble from branch. 



! Look at next instruction. 



Console Commands 
FIND 



285 



FIND 
Format 

FIND [quallfier-Hst] 

Qualifiers 

/MEMORY 

Search memory for a page-aligned block of good memory, 128 kilobytes in length. The 
search looks only at memory that is deemed usable by the bitmap. This command leaves 
the contents of memory unchanged. 

/RPB 

Search all of physical memory for a restart parameter block. The search does not use 
the bitmap to qualify which pages are looked at. The command leaves the contents of 
memory unchanged. 

Arguments 

None. 

Description 

The FIND command has the console search main memory, starting at address 0, for 
either a page-aligned, 128-kilobyte segment of good memory or a restart parameter block 
(RPB). If the segment or block is found, its address plus 512 is left in SP (R14). If the 
segment or block is not found, an error message is issued and the contents of SP are 
preserved. If no qualifier is specified, /RPB is assumed. 



Examples 



»>EX SP 

G OOOOOOOE 00000000 
»>FIND /MEM 
»>EX SP 

G OOOOOOOE 00000200 
»>FIND /RPB 
?2C FND ERR 00COOO04 
>» 



! Check the SP. 

! Look for a valid 128Kb. 
! Note where it was found. 

! Check for valid RPB. 
! None to be found here. 



286 Console Commands 
HALT 



HALT 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

The HALT command has no effect. It is included for compatability with other consoles. 

Examples 

»>HALT ! Pretend to halt. 

>» 
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HELP 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

The HELP command helps the console operator answer simple questions about command 
syntax and usage. 

Examples 

>»HKLP 

Following is a brief summary of all the commands supported by the console: 

UPPERCASE denotes a keyword that you must type in 
I denotes an OR condition 

[ ] denotes optional parameters 
<> denotes a field that must be filled in 
with a syntactically correct value 

Valid qualifiers: 

/B /W /L /Q /INSTRUCTION 
/G /I /V /P /M 
/STEP: /N: /NOT 
/WRONG /U 

Valid commands: 

DEPOSIT [<qualifiers>l <address> [<datum> [<datum>] ] 

EXAMINE [<qualifiers>] [<address>] 

MOVE [<qualifiers>l <address> <address> 

SEARCH [<qualifiers>l <address> <pattern> [<mask>] 

SET BFL(A>G <boot_flags> 

SET BOOT <boot_device> 

SET HALT <halt_action> 
SET RECALL | 1 

SET HOST/DUP/DSSI <node_number> [<task>] 

SET HOST/DUP/UQSSP </DISK | /TAPE> <controller_number> [<task>l 
SET HOST/DUP/UQSSP <physical_CSR_address> [<task>) 
SET HOST/MAINTENANCE/UQSSP/SERVICE <controller_number> 
SET HOST/MAINTENANCE/UQSSP <physical_CSR_address> 
SET LANGUAGE <language_number> 

SHOW BFL(A)G 
SHOW BOOT 
SHOW DEVICE 

SHOW DSSI 



288 Console Commands 
HELP 

SHOW ETHERNET 
SHOW LANGUAGE 
SHOW MEMORY [/FULL] 

SHOW HALT 

SHOW RLV12 
SHOW QBUS 
SHOW UQSSP 

SHOW SCSI 

SHOW TRANSLATION <physical_acidress> 

SHOW VERSION 
HALT 

INITIALIZE 
ON JAM 
CONTINUE 
START <address> 
REPEAT <conttnand> 
X <address> <count> 
FIND [/MEMORY | /RPB] 
TEST [<test_code> [<parameters>) ] 

BOOT [/R5:<boot_flag3> | /<boot_f lags>] [<boot_device>[ : ] ] 
NEXT [count! 
CONFIGURE 
HELP 
»> 
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INITIALIZE 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

The INITIALIZE command performs a processor initialization. The following registers 

are initialized, as specified in the VAX Architecture Reference Manual: 

PSL 041F0000. 

IPL IF. 

ASTLVL 4. 

SISR 0. 

ICCS Bits <6> and <0> are clear. The rest are unpredictable. 

RXCS 0. 

TXCS 80. 

MAPEN 0. 

CPU cache Flushed. 

Instruction buffer Unaffected. 

Console previous reference Longword, physical, address 0. 

TODR Unaffected. 

Main memory Unaffected. 

General registers Unaffected. 

Halt code Unaffected. 

Bootstrap in progress flag Unaffected. 

Internal restart in progress flag Unaffected. 

The KA670 firmware also performs the following initialization tasks: 

Initializes the CDAL bus timer. 

Initializes the address decode and match registers. 

Initializes the programmable timer interrupt vectors. 

Reads the BDR registers to determine the baud rate, then configures the SSCCR 

register accordingly. 

Clears all error status bits. 
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Examples 



»>IHIT 
>» 
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MOVE— MOVE_CMD 
Format 

MOVE [qualifier-list] (srcjaddress} {destjaddress} 

Qualifiers 

/B 
The data size is a b3rte. 

/W 

The data size is a word. 

/L 
The data size is a longword. 

/Q 

The data size is a quad word. 

19 
The address space is physical memory. 

N 

The address space is virtual memory. All access and protection-checking occur. If the 
access would not be allowed to a program running with the current PSL, the console 
issues an error message. Virtual space MOVE commands cause the destination PTE<M> 
bit to be set. If memory mapping is not enabled, virtual addresses are equal to physical 
addresses. 

/U 

Access to console private memory is allowed. This qualifier also disables virtual address 
protection checks. On virtual address writes, the PTE<M> bit will not be set if the 
/U qualifier is present. This qualifier is not inherited and must be respecified on each 
command. 

/N:{count} 

The address is the first of a range. The console deposits to the first address, then to the 
specified number of succeeding addresses. Even if the address is the symbolic address "-", 
the succeeding addresses are at larger addresses. The symbolic address specifies only the 
starting address, not the direction of succession. 

/STEP:{slze} 

The number to add to the current address. Normally this defaults to the data size, but is 
overriden by the presence of this qualifier. This qualifier is not inherited. 

/WRONG 

On reads, ECC errors that occur when accessing data in main memory are ignored. On 
writes, the ECC bits for this data are forced to the value of 3. ECC bits with a value of 3 
always generate a double-bit error. 
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Arguments 

{src_address} 

A longword address that specifies the first location of the source data to be copied. 

{dest_address} 

A longword address that specifies the destination of the first byte of data. These 
addresses may be any legal address specifier, as defined in Section 9.7.4.1 and Table 9-5. 
If no address is specified, "+" is assumed. 

Description 

On a MOVE command, the console copies the block of memory that sterts at the source 
address to a block beginning at the destination address. Typically, this command is used 
with the /N: qualifier to transfer large blocks of data. The destination will correctly 
reflect the contents of the source, regardless of the overlap between the source and the 
data. 

The MOVE command actually performs byte, word, longword, and quadword reads and 
writes as needed in the process of moving the data. Moves are only supported for the 
physical and virtual address spaces. 

Examples 



»>EX /H:4 

P 00000000 00000000 
P 00000004 00000000 
P 00000008 00000000 
P OOOOOOOC 00000000 
P 00000010 00000000 

»>EX /H:4 200 

P 00000200 58DD0520 
P 00000204 585E04C1 
P 00000208 00FF8FBB 
P 0000020C 5208A8DO 
P 00000210 540CA8DE 

>»MOVE /N:4 200 

»>EX /N:4 

P 00000000 58DD0520 
P 00000004 585E04C1 
P 00000008 00FF8FBB 
P OOOOOOOC 5208A8D0 
P 00000010 540CA8DE 

>» 



! Observe the destination. 



! Observe source data. 



! Move the data. 

! Observe the destination. 
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NEXT 
Format 

NEXT {count} 

Qualifiers 

None. 

Arguments 

{count} 

A value representing the number of macro instructions to execute. 

Description 

The NEXT command causes the processor to step the specified number of macro 
instructions. If no count is specified, a single step is assumed. The console enters 
spacebar step mode, as described in the VAX Architecture Reference Manual. In this 
mode, subsequent spacebar strokes initiate single steps. A carriage return forces a 
return to the console prompt. 

The console uses the trace and trace-pending bits in the PSL, and the SOB trace-pending 
vector to implement the NEXT command. Therefore, the following restrictions apply to 
the use of the NEXT command: 

• If memory management is enabled, the NEXT command works only if the first page 
in SSC RAM is mapped somewhere in SO (system) space. 

• The NEXT command does not work where time-critical code is being executed. 

• The NEXT command elevates the IPL to 31 for long periods of time (milliseconds) 
while single stepping over commands. 

• Unpredictable results occur if the macro instruction being stepped over modifies the 
SCBB, or the trace trap entry. This means you cannot use the NEXT command with 
other debuggers. This also implies that the user should validate PR$_SCCB before 
using the NEXT command. 



Examples 



»>DEP /L/P 1000 50D650D4 
»>DEP /L/P 1004 125005D1 
>»DEP /L/P 1008 00FE11F9 
>»EX /INSTRUCTION /N:5 1000 



Create a simple program. 



! List it. 



I? 00001000 


D4 CLRL 


RO 


P 00001002 


D6 INCL 


RO 


I? 00001004 


Dl CMPL 


S^#05,R0 


I? 00001007 


12 BNEQ 


00001002 


I? 00001009 


11 BRB 


00001009 


I? OOOOIOOB 


00 HALT 




»>DEP PR$ SCBB 200 




»>DEP SP 1000 


1000 




>» 







! Set up a user SCBB... 

! ...and the stack pointer. 
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»>N 








p 00001002 


d6 


INCL 


RO 


P 00001004 


Dl 


CMPL 


S*#05,R0 


P 00001007 


12 


BNEQ 


00001002 


P 00001002 


D6 


INCL 


RO 


»>H 5 








P 00001004 


Dl 


CMPL 


S^i05,M 


P 00001007 


12 


BNEQ 


00001002 


P 00001002 


D6 


INCL 


RO 


P 00001004 


Dl 


CMPL 


S-^IOS.RO 


P 00001007 


12 


BNEQ 


00001002 


»>N 7 








P 00001002 


D6 


INCL 


RO 


P 00001004 


Dl 


CMPL 


S'*#05,R0 


P 00001007 


12 


BNEQ 


00001002 


P 00001002 


D6 


INCL 


RO 


P 00001004 


Dl 


CMPL 


S'>#05,R0 


P 00001007 


12 


BNEQ 


00001002 


P 00001009 


11 


BRB 


00001009 


»>N 








P 00001009 


11 


BRB 


00001009 


>» 









Single step.. 

SPACEBAR 

SPACEBAR 

SPACEBAR 

CR 



.or multiple step the program. 
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REPEAT 
Format 

REPEAT {command} 

Qualifiers 

None. 

Arguments 

{command} 

A valid console command other than REPEAT. 

Description 

In a REPEAT command, the console repeatedly displays and executes the specified 
command. To stop the repeating, type [ctrij g You can specify any valid console command 



to repeat, with the exception of the REPEAT command. 

Examples 

»>REPEAT EX PR$_TODR ! Watch the clock. 

I OOOOOOIB 5AFE78CE 

I OOOOOOIB 5AFE78D1 

I OOOOOOIB 5AFE78FD 

I OOOOOOIB 5AFE7900 

I OOOOOOIB 5AFE7903 

I OOOOOOIB 5AFE7907 

I OOOOOOIB 5AFE790A 

I OOOOOOIB 5AFE790D 

I OOOOOOIB 5AFE7910 

I OOOOOOIB 5AFE793C 

I OOOOOOIB 5AFE793F 

I OOOOOOIB 5AFE7942 

I OOOOOOIB 5AFE7946 

I OOOOOOIB 5AFE7949 

I OOOOOOIB 5AFE794C 

I OOOOOOIB 5AFE794F 

I OOOOOOIB S'^C 
>» 
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SEARCH 
Format 

SEARCH [qualifierjist] {address} (pattern) [{mask}] ) 

Qualifiers 

IB 
The data size is a byte. 

/W 

The data size is a word. 

/L 
The data size is a longword. 

/Q 
The data size is a quadword. 

/P 

The address space is physical memory. Note that when virtual memory is examined, the 
address space and address in the response are the translated physical address. 

/W 

The address space is virtual memory. All access and protection-checlting occur. If the 
access would not be allowed to a program running with the current PSL, the console 
issues an error message. If memory mapping is not enabled, virtual addresses are equal 
to physical addresses. 

/U 

Access to console private memory is allowed. This qualifier also disables virtual address 
protection checks. TTiis qualifier is not inherited. It must be respecified with each 
command. 

/N:(count} 

The address is the first of a range. The first access is to the address specified, then 
subsequent accesses are made to succeeding addresses. Even if the address is the 
symbolic address "-", the succeeding addresses are at larger addresses. The sjrmbolic 
address specifies only the starting address, not the direction of succession. 

/STEP:{size} 

The number to add to the current address. Normally this defaults to the data size, but is 
overriden by the presence of this qualifier. This qualifier is not inherited. 

/WRONG 

ECC errors on read accesses to main memory are ignored. 

/NOT 

Inverts the sense of the match. 
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Arguments 

{start_address} 

A longword address that specifies the first location subject to the search. This address 
can be any legal address specifier, as defined in Section 9.7.4.1 and Table 9-5. If no 
address is specified, "+" is assumed. 

{pattern} 

The target data. 

[{mask}] 

A longword containing the target bits to be masked out. 

Description 

The SEARCH command finds all occurrences of a pattern, and reports the addresses 
where the pattern was found. If you use the /NOT qualifier, the command reports all 
addresses where the pattern did not match. 

The command accepts an optional mask to specify bits whose setting does not matter. 
For example, to ignore bit in the comparison, specify a mask of 1. If the omit the mask 
argument, the mask defaults to 0. 

Conceptually, a match condition occurs if the following condition is true: 
(pattern AND NOT mask) EQUALS (data AND NOT mask) 

pattern is the target data. 

mask is the optional bit mask (which defaults to 0). 

data is the data (byte, word, long, quad) at the current address. 

The \NOT qualifier and match condition determine whether or not the SEARCH 
command reports the address: 



/NOT Qualifier 

Used? Match Condition Report the Address? 



No True Yes 

No False No 

Yes True No 

Yes False Yes 



The address is advanced by the size of the pattern (byte, word, long or quad), unless 
overriden by the /STEP qualifier. 
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Examples 



»>DEP /P/L/N:1000 
>» 

»>DEP 300 1234S678 
»>DEP 401 12345678 
»>DEP 302 87654321 
>» 

»>SEARCH /NrlOOO /ST 

P 00000300 12345678 ! . 

P 00000401 12345678 ! . 
»>SEARCH /N:1000 12345678 

P 00000300 12345678 ! . 
»>SEARCH /N:1000 /HOT 

P 00000300 12345678 ! . 

P 00000400 34567800 

P 00000404 00000012 

P 00000500 43210000 

P 00000504 00008765 
»>SEARCH /N:1000 /ST 

P 00000502 87654321 

P 00000503 00876543 

P 00000504 00008765 

P 00000505 00000087 
»>SEAIICH /M:1000 /B 12 

P 00000303 12 

P 00000404 12 
»>SERRCH /M:1000 /ST:1 /W PEll 
>» 
>» 
>» ! Note, none found. 



! Clear some memory. 
! Deposit some "search" data. 



1 12345678 ! Search for all occurances. 
! ...of 12345678 on any byte... 
! . . .boundary. 

! Then try on longword... 
.boundaries. 

! Search for all non-zero . . . 
. longwords . 



1 

I 



hVVk ' Vk'Vit ! Search for "odd" longwords. 
..on any boundary. 



! Search for all occurrences., 
of the byte 12. 



Search for all words which. . . 

! ...could be interpretted as. 
! ...a "spin" (10$: brb 10$). 
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SET 
Format 

SET {parameter} {value} 

Parameters 

BFL(A)G 

Set the default M boot flags. The value must be a hexadecimal number of up to eight 
digits. 

BOOT 

Set the default boot device. The value must be a valid device name as specified in the 
BOOT command section. 

CONTROLP 



Sets JCtfll g as the console halt condition, instead of a break. Values of 1 or ENABLED set 
Icirll Has the halt condition. Values of or DISABLED set break as the halt condition. In 



either case, the setting of the break enable switch determines whether or not a halt will 
occur. 

HALT 

Sets the user-defined halt action. Acceptable values are to 4 or the keywords 
DEFAULT, RESTART, REBOOT, HALT, and RESTART_REBOOT. Refer to Table 9-1. 

HOST 

Invoke the DUP or maintenance driver on the selected node. Only SET HOST /DUP 
accepts a value parameter. 

/DUP — Use the DUP protocol to examine/modify parameters of a device on either the 
DSSI bus or the Q22-bus. The optional value for SET HOST /DUP is a task name for the 
selected DUP driver to execute. 

NOTE 

The KA670 DUP driver only supports SEND DATA IMMEDIATE messages, 

and hence those devices which also support them. 

/DSSI node — Select the DSSI node, by number, from to 7. 

/UQSSP — Select the Q22-bus device, using one of three methods: 

/DISK n — Specify the disk controller number n, from to 255. (The resulting 
fixed address for «=0 is 20001468. The floating rank for » > is 26.) 

/TAPE n — Specify the tape controller number n, from to 255. (The resulting 
fixed address for n=0 is 20001940. The floating rank for n > is 30.) 

csr_ad<lress — Specify the Q22-bus I/O page CSR address for the device. 

/MAINTENANCE — Use the maintenance protocol to examine and modify KFQSA 
EEPROM configuration parameters. Note that SET HOST /MAINTENANCE does not 
accept a task value. 

/UQSSP — 

/SERVICE n — Specify the KFQSA controller number ra of a KFQSA in service 
mode, from to 3. (The resulting fixed address of a KFQSA in service mode is 
20001910+4*tt.) 
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csr.address — Specify the Q22-bus I/O page GSR address for the KFQSA. 



LANGUAGE 

Set the console language and keyboard type. If the current console terminal does not 
support the DEC Multinational Character Set (MCS), then this command has no effect 
and the console remains in English message mode. Acceptable values are 1 to 15, and 
have the following meaning: 

1) Dansk 

2) Deutsch (Deutschland/Osterreich) 

3) Deutsch (Schweiz) 

4) English (United Kingdom) 

5) English (United States/Canada) 

6) Espanol 

7) Franpais (Canada) 

8) Pranfais (France/Belgique) 

9) Franpais (Suisse) 

10) Italiano 

11) Nederlands 

12) Norsk 

13) Portugues 

14) Suomi 

15) Svenska 

RECALL 

Sets the command recall state to either enabled (1) or disabled (0). 



Qualifiers 

Depends on the parameters used. 

Arguments 

None. 

Description 

The SET command sets the specified console parameter to the specified value. 



Examples 



»> 

»>SET BFIAG 220 
»> 

»>SET BOOT DIAO 
»> 

»>^:t halt reboot 
>» 
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»>SET HOST /DOT /DSSI 

Starting DUP server... 

DSSI Node (SUSAN) 

Copyright © 1988 Digital Equipment Corporation 

DRVEXR VI. D 5-JUL-1988 15:33:06 

5-JUL-1988 15:33:06 

5-JUL-1988 15:33:06 

5-JUL-1988 15:33:06 

5-JUL-1988 15:33:06 

5-JUL-1988 15:33:06 
End of directory 

Task Name? PARUIS 

Copyright © 1988 Digital Equipment Corporation 

P ARAMS > STAT PATH 



DRVTST 


VI, 


,0 


D 


HISTRY 


VI. 


,0 


D 


ERASE 


VI. 


,0 


D 


PARAMS 


VI, 


.0 


D 


DIRECT 


VI, 


.0 


D 



ID Path Block 



Remote Node 



DGS S 



DGS R 



MSGS S 



MSGS R 



PB FF811ECC Internal Path 



6 PB 


FF811FD0 


KFQSA 


KFX 


VI. 


1 PB 


FF8120D4 


KAREN 


RFX 


VlOl 


4 PB 


FF8121D8 


WILMA 


RFX 


VlOl 


5 PB 


FF8122DC 


BETTY 


RFX 


VlOl 


2 PB 


FF8123E0 


DSSIl 


VMS 


V5.0 


3 PB 


FF8124E4 


3 


VMB 


BOOT 


PARAMS> EXIT 








Exiting. . 


• 








Task Name 


7 









Stopping DUP server. . . 

>» 

»>SET HOST /OOP/OSSI PARAHS 

Starting DUP server... 

DSSI Node (SUSAN) 

Copyright © 1988 Digital Equipment Corporation 



PARAMS> SHOW NODE 
Parameter Current 



Default 



Type 



NODENAME SUSAN 

PARAMS> SHOW ALLCLASS 

Peirameter Current 



RF30 



Default 



Radix 



ALLCLASS 1 

PARAMS > EXIT 
Exiting. . . 

Stopping DUP server. . . 
>» 

»>SET HOST /MAINT/UQSSP 20001468 

UQSSP Controller (772150) 



String Ascii 

Type Radix 
Byte Dec 








14328 
61 








14328 
61 
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Enter SET, CLEAR, SHOW, HELP, EXIT, or 
Node CSR Address Model 



QUIT 



772150 


21 


1 760334 


21 


4 760340 


21 


5 760344 


21 


7 KFQSA - 




? HF.7J» 




Commands : 




SET <node> /KFQSA 




SET <node> <CSR_address> <model> 


CLEAR <node> 




SHOW 




HELP 




EXIT 




QUIT 




Parameters : 




<node> 




<CSR_address> 




<model> 




? SET 6 /KFQSA 




? SHOM 




Node CSR Address 


Model 


772150 


21 


1 760334 


21 


4 760340 


21 


5 760344 


21 


6 KFQSA - 




? EXIT 




Programming the KFQSA 




>» 




»>SET LAMGOA(X 5 




»> 




»>SET RECALL 1 




>» 





set KFQSA DSSI node number 
enable a DSSI device 
disable a DSSI devicei 
show current configuration 
print this text 
program the KFQSA 
don't program the KFQSA 

to 7 

760010 to 777774 

21 (disk) or 22 (tape) 



Console Commands 303 
SHOW 



SHOW 
Format 

SHOW {parameter} ) 

Parameters 

BFL(A)G 

Show the default R5 boot flags. 

BOOT 

Show the default boot device. 

CONTROLP 

Show the current state of [^@ halt recognition, either ENABLED or DISABLED. 



DEVICE 

Show a Hst of all devices in the system. 

HALT 

Show the user-defined halt action: DEFAULT, RESTART, REBOOT, HALT, or RESTART, 
REBOOT. Refer to Table 9-1 for usage. 

DSSI 

Show the status of all nodes that can be found on the DSSI bus. For each node found, 
the console displays the node number, the node name, and the boot name and tjrpe of the 
device, if available. The command does not indicate if a device is bootable. 

The node that issues the command reports a node name of "*". 

The device infoi-mation is obtained from the media type field of the MSCP command GET 
UNIT STATUS. If the node is not running, the console displays an MSCP server and no 
device information. 

ETHERNET 

Show the hardware Ethernet address for all Ethernet adapters found. If no Ethernet 
adapters are found the response is blank. 

LANGUAGE 

Show the console language and keyboard type. Refer to the corresponding SET 
IJ^lNGUAGE command for the meaning. 

MEMORY 

Show main memory configuration on a board-by-board basis. Also report the addresses of 
bad pages, as defined by the bitmap. 

/FULL Show the normally inaccessible areas of memory, such as the PFN bitmap 
pages, the console scratch memory pages, and the Q22-bus scatter/gather map pages. 

QBUS 

Show all Q22-bus I/O addresses that respond to an aligned word read. For each address, 
the console displays the hexadecimal address in the VAX I/O space, the octal address as 
it would appear in the Q22-bus I/O space, and the hexadecimal word data that viras read. 
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This command may take several minutes to complete, so the user may want to issue a 
Ctrl] ^ to terminate the command. The command disables the scatter/gather map for the 



duration of the command. 

RECALL 

Show the current state of command recall, ENABLED or DISABLED. 

RLV12 

Show all RLOl and RL02 disks that appear on the Q22-bus. 

SCSI 

Show any SCSI devices in the system. 

TRANSLATION 

Show any virtual addresses that map to the specified physical address. The firmware 
uses the current values of the page table base and length registers to perform its search. 
It is assumed that page tables have been properly built. 

UQSSP 

Show the status of all disks and tapes on the Q22-bus that support the UQSSP protocol. 
For each disk or tape, the console displays the controller number, the controller CSR 
address, the boot name, and the type of each device connected to the controller. The 
command does not indicate if a device is bootable. 

The device information is obtained from the media type field of the MSCP command GET 
UNIT STATUS. If the node is not running, the console displays an MSCP server with no 
device information. 

VERSION 

Show the current version of the firmware. 

Qualifiers 

Depends on the specific parameter. 

Arguments 

None. 

Description 

The SHOW command displays the setting of the specified console parameter. 



Examples 



>» 

»>SHOW BFLAG 

00000220 

>» 

»>SHOW BOOT 

DIAO 

>» 

»>SHOW DEVICE 



Console Commands 305 
SHOW 



DSSI Node (SUSAN) 
-DIAO (RF30) 

DSSI Node 1 (K;^i?EN) 
-DIM (RF30) 

DSSI Node 3 (*) 

DSSI Node 4 (WILMA) 
-DIA4 (RF30) 

DSSI Node 5 (BETTY) 
-DIA5 (RF30) 

DSSI Node 6 (KFQSA) 



SCSI Adapter (761300), SCSI ID 7 
-DKAIOO (DEC RZ31 (C) DEC) 
-DKA300 (MAXTOR XT-8000S) 

UQSSP Dis)c Controller (772150) 
-DUAO (RF30) 

UQSSP Disk Controller 1 (760334) 
-DUBl (RF30) 

UQSSP Disk Controller 2 (760340) 
-DUC4 (RF30) 

UQSSP Disk Controller 3 (760344) 
-DUDS (RF30) 

Ethernet Adapter 

-EZAO (08-00-2B-03-82-78) 

>» 

»>SH0W DSSI 

DSSI Node (SUSAN) 
-DIAO (RF30) 

DSSI Node 1 (K;iVREN) 
-DIAl (RF30) 

DSSI Node 3 (*) 

DSSI Node 4 (WILMA) 
-DIA4 (RF30) 

DSSI Node 5 (BETTY) 
-DIA5 (RF30) 

DSSI Node 6 (KFQSA) 
>» 

»>SHOW ETHiaWET 

Ethernet Adapter 

-EZAO (08-00-2B-03-82-78) 

>» 

»>SHOW HALT 

Reboot 

>»SHOH LANGDAGE 

English (United States /Canada) 

>» 

»>SHOW MEMORY 

Memory 0: 00000000 to 003FFFFF, 4MB, bad pages 
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Total of 4MB, bad pages, 98 reserved pages 

»> 

»>SHO« MEMORY /F0LL 

Memory 0: 00000000 to 003FFFFF, 4MB, bad pages 

Total of 4MB, bad pages, 98 reserved pages 

Memory Bitmap 

-003F3C0O to 003F3FFF, 2 pages 

Console Scratch Area 

-003F4000 to 003F7FFF, 32 pages 

Qbus Map 

-003F8000 to 003FFFFF, 64 pages 

Scan of Bad Pages 

>» 

»>SHON QBOS 

Scan of Qbus I/O Space 

-200000DC (760334) - 0000 (300) RQDX3/KDA50/RRD50/RQC25/KFQSA-DISK 

-200000DE (7 60336) - OAAO 

-200000EO (760340) = 0000 (304) RQDX3/KDA50/RRD50/RQC25/KFQSA-DISK 

-200000E2 (760342) - OAAO 

-200000E4 (760344) = 0000 (310) RQDX3/KDA50/RRD50/RQC25/KFQSA-DISK 

-200000E6 (760346) - OAAO 

-20001468 (772150) = 0000 (154) RQDX3/KDA50/RRD50/RQC25/KFQSA-DISK 

-2000146A (772152) = OAAO 

-20001F40 (777500) - 0020 (004) IPCR 

Scan of Qbus Memory Space 

>» 

»>SH0W R1.V12 

»> 

»>SH0W SCSI 

SCSI Adapter (761300), SCSI ID 7 

-DKAIOO (DEC RZ31 (C) DEC) 

-DKA300 (MAXTOR XT-8000S) 

»> 

»>SHOH TRAMSIATIOM 1000 

V 80001000 
>» 

»>SHOH OQSSP 

UQSSP Dis)c Controller (772150) 
-DUAO (RF30) 

UQSSP Dis)c Controller 1 (760334) 
-DUBl (RF30) 

UQSSP Dis)c Controller 2 (760340) 
-DUC4 (RF30) 

UQSSP Dis)c Controller 3 (760344) 

-DUDS (RF30) 

>» 

»>SHOW VERSION 



KA670-A V3.0, VMS 2.11 
>» 
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START 
Format 

START [{address}] 

Qualifiers 

None. 

Arguments 



[{address}] , 

The address at which to begin execution. This is loaded in the user's PC. 

Description 

The START command tells the console to start executing instructions at the specified 
address If you do not specify an address, the current PC is used. If memory mappmg is 
enabled macro instructions are executed from virtual memory and the address is treated 
as a virtual address. The START command is equivalent to a DEPOSIT to PC command, 
followed by a CONTINUE command. START does not perform an INITIALIZE command. 

Examples 

»>START 1000 
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TEST 
Format 

TEST [{test_number} [{test_arguments}]] 

Qualifiers 

None. 

Arguments 

{test_number} 

A two-digit hexadecimal number specifying the test to execute. 

{test_arguments) 

Up to five additional test arguments. The console accepts these arguments, but does not 
attach any meaning to them. For the interpretation of these arguments, refer to the test 
specification for each test. 

Description 

The TEST command tells the console to invoke a diagnostic test progrtim specified by the 
test number. If you specify test number 0, the power-up script is executed. The console 
accepts an optional list of up to five additional hexadecimal arguments. 

For a detailed explanation of the diagnostics, see Section 9.9. 

Examples 

»> ! Execute the power-up diagnostic script 

>» ! Warning. . .this has the same affect as a pow€sr-up! 

»> 

>»TEST 



66 . . 65 . . 64 . . 63 . . 62 . . 61 . . 60 . . 59 . . 58 . . 57 . . 56 . . 55 . . 54 . . 53 . . 52 . . 51 . 
50.. 49.. 48.. 47.. 46.. 45.. 44.. 43.. 42.. 41.. 40.. 39.. 38.. 37.. 36.. 35. 
34.. 33.. 32.. 31.. 30. .29.. 28.. 27.. 26.. 25.. 24.. 23.. 22.. 21.. 20.. 19. 
18.. 17. .16.. 15. .14. .13. .12.. 11. .10.. 09. .08. .07. .06. .05.. 04. .03. 

>» 

>» ! List all of the diagnostic tests. 

>» 

»>T 9E 
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Test 


# 


Address 




20051000 




20051F04 


30 


2005A688 


31 


2005A4B0 


32 


20059F7C 


33 


20059EF0 


34 


200535C0 


35 


20060DAC 


36 


20061B00 


37 


20061EA8 


38 


2006219F 


3F 


2005C360 


40 


2005CDC4 


41 


2005CF9C 


42 


2005367C 


44 


20061750 


45 


20058A2C 


46 


200605EC 


47 


2005CB6C 


48 


2005BF94 


49 


2005BB38 


4A 


2005B80C 


4B 


2005B514 


4C 


2005B0B0 


4D 


2005AF28 


4E 


2005AD60 


4F 


2005AAB0 


51 


20062419 


52 


20053C1E 


53 


20053EE8 


54 


2005374E 


55 


20054097 


56 


2005EB6C 


58 


2005F378 


59 


2005DCB8 


5A 


20058930 


5C 


2005E220 


5F 


2005D06C 


60 


20058564 


62 


200544CC 


63 


20054648 


80 


20057EB0 


81 


20054133 


82 


200542F5 


83 


20055326 


84 


200569C4 


85 


200547A0 


86 


20054C4C 


87 


20057BFC 


90 


20053B9F 


91 


20053B38 


99 


2006262E 


9A 


2005F908 


9B 


200622ED 


9C 


20058D78 


9D 


20059CD7 


9E 


20054108 


9F 


2006270E 


CI 


20053271 


C2 


20053444 


C5 


20059DEE 


C6 


200531B8 



Name 



Parameters 



SCB 

De_executive 

Memory_Init_Bitmap *** mark_Hard_SBEs ****** 

Memory_Setup_CSRs 

G_Chip_registers 

G_Ch ip_powerup 

SSC_ROM 

B_Ca che_di ag_mode 

B Cache_w_memory 



********** 
********** 
** 



addr incr wait_time_secs extended_test ******* 

addr~incr ********* 
P_B_Cache_w_memory addr_incr ********* 
G_Chip_timeout ****** 

M:em_FDM_Addr_shorts *** cont_on_err ****** 

Memory_count_pages First_board Last_bd Soft_errs_allowed ******* 
Eoard_Reset * 
Chk_f or_Interrupts ***** 
P_Cache_w_memory addr_incr ********* 

cache_mem_cqbic start_addr end_addr addr_incr ******* 
P_Cache_diag_mode addr_incr wait_tinie_secs extended_test ******* 
Memory_Refresh start_a end incr cont_on_err time_seconds ***** 
Memory_Addr_shorts start_add end_add * cont_on_err pat2 pat3 **** 
Memory_FDM *** cont_on_err ****** 

Memory_ECC_SBEs start_add end_add add_incr cont_on_err 
Memory Byte_Errors start_add end_add add_incr cont_on_err 
Memory~ECC_Logic start_add end_add add_incr cont_on_err ****** 
Memory_Address start_add end_add add_incr cont_on_err ****** 

start_add end_add add_incr cont_on_err ****** 

sitart_add end_add add_incr cont_on_err ****** 

******* 

which_timer wait_time_us *** 

repeat_test_250ms_ea Tolerance *** 



Memo ry_By t e 

Memory_Data 

FPA 

£>SC_Prog_timers 

£>SC_TOY_Clock 

Virtual_Mode 

]:nterval_Tiraer 

SHAC_LPBCK 

£>HAC_RESET 

SGEC_LPBCK_ASS 1ST 

R_G_Chip_RDAL 

SHAC 

SGEC 

;;SC_Console_SLU 

<:onsole_QDSS 

ODSS_any 

CQBIC_memory 

Qbus_MSCP 

Qbus_DELQA 

KZQSA_LPBCK1 

KZQSA_LPBCK2 

KZQSA_memory 

KZQSA_DMA 

KZQSA_EXTLPBCK 

CQBI C_regi ster s 

CQBIC_powerup 

!riush_Ena_Caches 

INTERACTION 

Init_memory_8MB 

List_CPU_registers 

Utility 

List_diagnostics 

Create_AO_Script 

SSC_RAM_Data 

SSC_RAM_Data_Addr 

SSC_regi3ters 

SSC_powerup 



****** 
****** 



********* 

* 

******* 

dssi_bus port_nuinber time_secs 

time_secs ** 

dont_report memory_bad repeat_count * 

shac_number ******* 

loopback_type no_ram_tests ****** 

atart_BAUD end_BAUD ****** 

mark_not_present selftest_rO selftest_rl *** 

input_csr selftest_rO selftest_rl ****** 

********** 

IP csr ****** 

device_num_addr **** 

controller_number ******** 

controller_number ********* 

incr test_pattern controller_number ******* 

Controller_number inain_mem_buf ******** 

controller number **** 



dis_flush_primary dis_flush_backup 

pass_count disable_device **** 

* 

* 

Expnd_err_msg get_mode init_LEDs clr_ps_cnt 

* 

********** 

* 



********* 
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Scripts 

# Description 

AO User defined scripts 

Al Powerup tests. Functional Verify, continue on error, numeric countdown 

A3 Functional Verify, stop on error, test # announcements 

A4 Loop on A3 Functional Verify 

A5 Address shorts test, run fastest way possible 

A6 Memory tests, mark only multiple bit errors 

A7 Memory tests 

A8 Memory acceptance tests, mark single and multi-bit errors, call A7 

A9 Memory tests, stop on error 



»> 
>» 
>» 

»>T FE 



Show the diagnostic state. 



Bitmap=01FF2000, Length=00002000, Check sum=FFFF, Busmap-OIFFSOOO 
Test_number=9E, Subtest=01, Loop_Subtest=00, Error_type=FF 
Error_vector-O000, Last_exception_PC-00000000, Severity-02 

Total_error_count=0000, Led_display=09, Console_display-9E, 3ave_mchk_code-ll 
parameter_l=0OO0O0O0 2=00000000 3=00000000 4=00000000 5-00000000 
parameter_6=00000000 7=00000000 8-00000000 9-00000000 10-00000000 
previoua_error=00000000, 00000000, 00000000, 00000000 
Flags=OFFFFC00448E 
Return_stack=201406A8, Subtest_pc-20054125, Timeout-00030D40 



>» 
»> 
>» 
»>T 9C 



Display the CPU registers. 



SBR-01FB800C 
P0BR=80000000 
TODR=00060BF0 
TCR0=00000005 
TCRl-00000001 
RXCS=00000000 
PCSTS=0000080A 
BCSTS-01800000 



SLR-00002021 
P0LR-00100A80 
ICCS-00000000 
TIR0-1AA01F6F 
TIR1-1AA5E858 
RXDB-OOOOOOOD 
PCERR-0000B52O 



SAVPC-80000011 SAVPSL-80404174 



P1BR-7FC45400 
ACCS-00000000 
TNIRO-00000000 
TNIRI-OOOOOOOF 
TXCS-00000000 
PCIDX-000007F8 
BCERR-20059238 



BCCTL-OOOOOOOE 
BCBTS-20000000 BCP1TS-20000000 BCP2TS-20000000 
BDR-3BFA08AF DLEDR-OOOOOOOC SSCCR-00D55570 
DSSI_l-04 (BUS_1) PQBBR_l-03060022 
PSR_l-00000000 PESR_l-00000000 
DSSI_2=05 {BUS_0) PQBBR_2-03060022 
PSR_2-00000000 PESR_2-00000000 
NICSR0-1FFF0003 3-00004030 4-00004050 5-8039FF00 
NICSR9-04E204E2 10=00030000 11-00000000 12-00000000 
NISA-08-00-2B-06-10- 
42 RDESO-00441300 1-00000000 2-05EEOOOO 3-000046FO 

TDES0-00008C80 1-07000000 2-00400000 



SCBB- 

P1LR-001FFD6F SID- 

MAPEN-00000000 BDMTR" 

TIVRO-00000078 BDMKR- 

TIVR1-0000007C SCR- 

TXDB-00000030 DSER- 

PCTAG-40000000 QBEAR- 

BCIDX-000007F0 DEAR- 

BCRFR-00000420 QBMBR- 

CBTCR-00004000 IPCRO^ 

PMCSR_l-00000000 SSHMA_1« 

PFAR_l-00000000 PFR_1- 

PMCSR_2-00000000 SSHMA_2- 

PFAR 2-00000000 PFR 2- 



e-SSEOFOOO 7-1 
13-00000000 15- 



20051000 

OB000003 

■20084000 

■0000007C 

OOOODOOO 

00000000 

■OOOOOOOF 

00000000 

■01FF8000 

-0000 

00008A20 

00000000 

0000CA20 

00000000 

00000000 

OOOOFFFF 



MEM_FRU 1 MCSR_0=80000002 1-80800002 
MEM_FRU 2 MCSR_4-00000006 5-00000006 
MEM_FRU 3 MCSR_8=00000006 9-00000006 
MEM_FRU 4 MOSR12-00000006 13-00000006 
RMESR-00440044 RMEAR-00000000 RIOEAR-00080188 



2-81000002 

6-00000006 

10-00000006 

14-00000006 

CEAR-00000000 



3- 

3- 

7- 

11- 

15- 

MCDSR* 



'000040FA 
81800002 
00000006 
00000006 
00000006 
■3E391700 



>» 
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UNJAM 



UNJAM 
Format 
Qualifiers 

None. 

Arguments 

None. 

Description 

The UNJAM command performs an I/O bus reset. This is implemented by writing 1 to 
IPR 55. The command also performs an explicit software reset on the SGEC and SHAG 
chips, since PR$_IORESET has no affect on them. 



Examples 



»>0NJM4 
>» 
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X 

X — Binary Load and Unload 
Format 

X {address} {count} <CR> {line_checksum} {data} {data_checksum} 

Qualifiers 

None. 

Arguments 

None. 

Description 

The X command is for use by automatic systems communicating with the console. It is 
not intended for use by operators. 

The console loads or unloads (writes to or reads from memory) the specified number of 
data bytes, starting at the specified address through the console serial line, regardless of 
which device is serving as the system console. 

If bit 31 of the count is clear, data is to be received by the console and deposited into 
memory. If bit 31 of the count is set, data is to be read from memory and sent by the 
console. The remaining bits in the count are a positive number indicating the number of 
bytes to load or unload. 

The console accepts the command upon receiving the carriage return. The next byte the 
console receives is the command checksum, which is not echoed. The command checksum 
is verified by adding all command characters into an 8-bit register initially set to 0. 
The command characters include the checksum and separating whitespace, but not the 
terminating carriage return, rubouts, or characters deleted by rubout. 

• If no errors occur, the result is 0. 

• If the command checksum is correct, the console responds with the input prompt and 
either sends data to the requester or prepares to receive data. 

• If the command checksum is in error, the console responds with an error message. 
The intent is to prevent inadvertent operator entry into a mode where the console is 
accepting characters from the keyboard as data, with no escape mechanism possible. 

If the command is a load (bit 31 of the count is clear), the console responds with the input 
prompt, then accepts the specified number of bytes of data for depositing to memory, and 
an additional byte of received data checksum. The data is verified by adding all data 
characters and the checksum character into an 8-bit register initially set to zero. If the 
final contents of the register is not 0, the data or checksum are in error and the console 
responds with an error message. 

If the command is a binary unload (bit 31 of the count is set), the console responds with 
the input prompt, followed by the specified number of bytes of binary data. As each byte 
is sent it is added to a checksum register initially set to 0. At the end of the transmission, 
the 2's complement of the low byte of the register is sent. 
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If the data checksum is incorrect on a load, or if memory errors or line errors occur 

during the transmission of data, the entire transmission is completed and the console 

issues an error message. 

If an error occurs during loading, the contents of the memory being loaded are 

unpredictable. 

Echo is suppressed during the receiving of the data string and checksums. 

To avoid treating flow control characters from the terminal as valid command line 
checksums, all flow control is terminated at the reception of the carriage return 
terminating the command line. 

It is possible to i:ontrol the console serial line through the use of the control characters 
d^ g, [gtri] §, and so on) during a binary unload. It is not possible to control the console 



serial line during a binary load, because all received characters are vahd binary data. 

The console must recieve the data being loaded with a binary load command at a rate of 
at least 1 byte every 60 seconds. The console must receive the command checksum that 
precedes the data within 60 seconds of the carriage return that terminates the command 
line. The data checksum must be received within 60 seconds of the last data byte. If any 
of these timing requirements are not met, the console aborts the transmission by issuing 
an error message and prompting for input. 

The entire command, including the checksum, can be sent to the console as a single burst 
of characters at the console serial lines's specified character rate. The console is able to 
receive at least 4 kilobytes of data in a single X command. 

Examplos 

None. 
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! — Comment 

Format 

Qualifiers 

None. 

Arguments 

None. 

Description 

The comment command is used to document command sequences. The ! comment 
character can appear anywhere on the command line. All characters following the 
comment character are ignored. 

Examples 

>»• The console ignores this line. 
>» 
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9.8.1 Command Summary 

Table 9-6 and Table 9-7 summarize the console commands. 

Conventions for Table 9-6 and Table 9-7 

UPPERCASE denotes the command or qualifier keyword. 
enclose a mandatory item that must be syntactically correct. 
[ ] enclose an optional item. 
! separates optional items. 

Parameters 

bootjlags, count, size, address, and parameters are hexadecimal longword values. 

bootjdevice is a legal boot device name. 

csrjaddrsss is a Q22-bus I/O page CSR address. 

controller jnumber is a controller number from to 255. 

halt_action is the value of the user-defined halt action, from to 4. 

language_type is the language code, from 1 to 15. 

command is any console command other than REPEAT. 

data, pattern, and mask are hexadecimal values of the current size. 

testjnumber is a hexadecimal byte test number. 

Table 9-6 Console Command Summary 



Command 


Qualifiers 


Argument 


OtherCs) 


BOOT 


m.h:{bootJlags) /{bootjlags] 


[{boot_device]] 


— 


CONFIGURE 


— 


— 


— 


CONTINUE 


— 


— 


— 


DEPOSIT 


/B/W/L/Q — /G/IA/'/P/M/U 
/N:{count] /STEP:{si2e) AVRONG 


{address} 


{data] [[data]] 


EXAMINE 


/BAV/L/Q— /G/IA^/P/M/U 
fU:[count} /STEP:[size] AVRONG 
/INSTRUCTION 


[{address)] 




FIND 


/MEM/RPB 


— 


— 


HALT 


— 


— 


— 


HELP 


— 


— 


— 


INITIALIZE 


— 


— 


— 


MOVE 


/B/W/L/Q — /V/P/U 
/N:{count] /STEP:{st0e) /WRONG 


{src_address} 


[deat_address] 


NEXT 


— 


[{count}] 


— 


REPEAT 


— 


{command] 


— 


SEARCH 


/BAV/L/Q — A/'/P/U 
/N:{count} /STEP:{swc) AVRONG 
/NOT 


{startjiddress] 


{pattern] [[mask]] 


SET BFUAXl 


— 


[bitmap] 


— 


SET BOOT 


— 


{device_stri7ig] 


— 


SET CONTROLP 


— 


(0/1) 


— 
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Table 9-6 (Cont.) Console Command Summary 



Command 


Qualifiers 


Argument 


Other(s) 


SET HALT 


— 


[haltjaction] 


— 


SET HOST 


/DUP /DSSI /BUS:{0/1) 


[nodejiumher] 


{[task]] 


SET HOST 


/DUP /UQSSP {/DISK ! /TAPE ) 
/DUP /UQSSP 


[controller^ 

number] 

[csrjaddress] 


[[task]] 
[[task]] 


SET HOST 


/MAINTENANCE /UQSSP 
/SERVICE 
/MAINTENANCE /UQSSP 


[controller_ 

number] 

[csrjaddress] 




SET LANGUAGE 


— 


[language Jype] 


— 


SET rec;all 


— 


{0/1} 


— 


SHOW BPUAXJ 


— 


— 


— 


SHOW BOOT 


— 


— 


— 


SHOW 
CONTROLP 


— 


— 


— 


SHOW DEVICE 


— 


— 


— 


SHOW DSSI 


— 


— 


— 


SHOW 
ETHERNET 


— 


— 


— 


SHOW HALT 


— 


— 


— 


SHOW 

LANGUAGE 


— 


— 


— 


SHOW MEMORY 


/FULL 


— 


— 


SHOW QBUS 


— 


— 


— 


SHOW RECALL 


— 


— 


— 


SHOW RLV12 


— 


— 


— 


SHOW SCSI 


— 


— 


— 


SHOW 
TRANSLATION 


— 


[physjiddress) 


— 


SHOW UQSSP 


— 


— 


— 


SHOW VERSION 


— 


— 


— 


START 


— 


[address] 


— 


TEST 


— 


[test_numher] 


[\parametera]\ 


UNJAM 


— 


— 


— 


X 


— 


[address] 


[count] 


XDELTA 


/CONTINUE 


— 


— 
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Table 9-7 Console Qualifier Summary 



Data Control 



/B 

AV 

/L 

/Q 

/N:[count] 

/STEP:(si^f) 

/WRONG 



Byte, legal for memory references only. 

Word, legal for memory references only. 

Longword, the default for GPR and IPR references. 

Quadword, legal for memory references only. 

Specify number of additional operations. 

Override the default step incrementing size with the value specified for the 
current reference. 

On writes, use the value of 3, which always generates double bit errors. 
Ignore ECC errors on reads of main memory. 



Address Space Control 



/G 
/I 

/? 
/U 
/M 



General-purpose registers 

Internal processor registers 

Virtual memory 

Physical memory, both VAX memory and I/O spaces 

Protected memory (ROMs, SSC RAM, PFN bitmap, and so on) 

Machine state (PSL) 



Command Specific 



/INSTRUCTION 

/NOT 

/R5:{bootJlags}, 
/{bootjlags] 

/RPB, /MEM 

/DUP, /DSSI, 
/UQSSP, 
/DISK, /TAPE, 
/MAINTENANCE, 

/SERVICE 
/CONTINUE 



EXAMINE command only. Disassemble the instruction at address specified. 

SEARCH command only. Invert the sense of the match. 

BOOT command only. Specify a function bitmap to pass to VMB through R5. 
See Figure 9-7 for a bit description of R5. Either form of the command is 
acceptable. 

FIND command only. Search for valid RPB or good block of memory. 

SET HOST command only. Refer to command description for usage. 



XDELTA command only. Enter XDELTA step mode at current PC. 
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9.9 Diagnostics 

The ROM-based diagnostics constitute the bulk of the firmware on the KA670. These 
diagnostics run automatically on power-up. You can run one or all of the tests 
interactively using the TEST command. This section summarizes the functions of the 
diagnositics. 

The ROM-based diagnostics have several functions: 

1. During power-up, they determine if enough of the KA670 is working to allow the 
console to run. 

2. During the manufacturing process, they verify that the board was correctly built. 

3. In the field, they verify that the board is operational, and they report all detected 
errors. 

4. They allow sophisticated users and field service technicians to run individual 
diagnostics interactively, with the intent of isolating errors to the field replaceable 
unit (FRU). 

To meet these requirements, the diagnostics have been designed as a collection of 
individual parameterized tests. A data structure (called a script) and a program (called 
the diagnostic executive) orchestrate the running of these tests in the right order with 
the right parameters. 

A script is a data structure that points to various tests. There are several scripts — one 
for the field, and several for manufacturing, depending on where the board is on the 
manufacturing line. Sophisticated users may also create their own scripts interactively. 
The script also contain the following information: 

What parameters need to be passed to the test 

What is to be displayed, if anything, on the console 

What is to be displayed, if anything, on the LED 

What to do on errors (halt, loop, or continue) 

Where the tests may be run from 

For example, there are certain tests that can be run only from the EPROM. Other 
tests are position-independant code (PIC) that may be run from EPROM or main 
memory, in the interests of execution speed. 

The diagnostic executive interprets scripts to determine what tests are to be run. There 
are several built-in scripts on the KA670 that are used for manufactuiing, power-up, and 
field service functions. The diagnostic executive automatically invokes the correct script 
based on the current environment of the KA670. Any script can be explicitly run with 
the TEST command from the console terminal. 

The diagnostic executive is responsible for controlling the tests, so errors can be caught 
and reported to the user. The executive also ensures the machine is left in a consistent 
and well-defined state when the tests are run. 
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9.9.1 Error Reporting 

Before a console is established, the only error reporting is on the KA670 diagnostic 
LEDs and any LEDs on other boards. After a console is established, it reports all errors 
detected by the diagnostics. When possible, the diagnostics issue an error summary on 
the console. 

For example, Example 9-1 shows a typical error display. 

O ?9A 2 02 Ff 0000 0000 01 ; saBTEST_9A__02, DE_INTERACTION.LIS 

@ Pl=00000002 P2=00000000 P3-00004000 P4=00008000 P5=0000C000 

@ P6=00000000 P7=00000002 P8=00000002 P<)=84004000 P10=00001FFF 

O r0=00000054 rl=00000040 r2^00000000 r3=0000C524 r4=00000014 

@ r5=30002800 r6=0000C4E0 r7=20008000 r8=00004000 EPC=20057BBD 

Normal operation not possible. 

Example 9-1 Diagnostic Register Dump 

II The first line is a test summary, containing six hexadecimal fields. 

• ?9A identifies the diagnostic test. 

• 2 is the severity level of a test failure, as dictated by the script. Severity level 
2 failures display this five-line error printout and halt an autoboot to console I/O 
mode. Severity level 1 errors display the first line of the error printout, but do 
not interrupt an autoboot. Most tests have a severity level of 2. 

• 02 is a subtestlog number that, in conjunction with listing files, isolates to 
within a few instructions where the diagnostic detected the error. 

• FF is a de_error code used by the diagnostic executive to signal the diagnostic's 
state and any illegal behavior. This field indicates a condition that the diagnostic 
expects on detecting a failure. Possible codes: 

FF — Normal error exit from diagnostic 

FE — Unanticipated exception/interrupt in diagnostic. 

FD — Interrupt in cleanup routine 

FC — Interrupt in interrupt handler 

FB — Script requirements not met 

FA — No such diagnostic 

EF — Unanticipated exception in executive 

• 0000 is the SCB vector (if nonzero) through which an unexpected exception or 
interrupt trapped, when the de_error field indicates an unexpected exception or 
interrupt (FE or EF). 

• 0000 is the count of previous errors. 

• 01 is the Ioop_subtest, an additional subtestlog generated out of the context of 
the current test as specified by the current test number and subtestlog. Usually 
these logs occur in common subroutines called from a diagnostic test. 

• SUBTEST_9A_02 is a subtest_symbol that identifies the most recent subtestlog 
entry in the listing file. 

• DE_INTERACTION.LIS is the name of the Iisting_file that contains the failed 
diagnostic. 
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® P1...P5 are the first five longwords of the diagnostic state. This is internal 
information that is used by repair personnel. 

® P6...P10 are the last five longwords of the diagnostic state. 

O R0...R4 are the first five GPRs at the moment the error was detected. 

R5...R8 are additional GPRs and ERF is a diagnostic summary longword. 

9.9.2 Diagnostic Interdependencies 

When running individual tests interactively, be aware that certain tests depend on some 
state set up from a previous test. In general, you should not run tests out of order. 



A 
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A.I Introduction 

The Q22-bus, also known as the extended LSI-11 bus, is the low-end member of Digital's 
bus family. All of Digital's microcomputers, such as the MicroVAX I, MicroVAX II, 
MicroVAX 3500, MicroVAX 3600, and MicroPDP-11 use the Q22-bus. 

The Q22-bus consists of 42 bidirectional and 2 unidirectional signal lines. These form the 
lines along which the processor, memory, and I/O devices communicate with each other. 

Addresses, data, and control information are sent along these signal lines, some of which 
contain time-multiplexed information. The lines are divided as follows: 

• 16 multiplexed data/address lines — BDAL<15:00> 

• 2 multiplexed address/parity lines — BDAL<17:16> 

• 4 extended address lines — BDAL<21:18> 

. 6 data transfer control lines - BBS7, BDIN, BDOUT, BRPLY, BSYNC, BWTBT 

• 6 system control lines - BHALT, BREF, BEVNT, BINIT, BDCOK, BPOK 

• 10 interrupt control and direct memory access control lines — BIAKO, BIAKI, BIRQ4, 
BIRQ5, BIRQ6, BIRQ7, BDMGO, BDMR, BSACK, BDMGI 

In addition, a number of power, ground, and space lines are defined for the bus. Refer to 
Table A-1 for a detailed description of these lines. 

The discussion in this appendix applies to the general 22-bit physical address capability. 
All modules used with the KN210 CPU module must use 22-bit addressing. 

Most Q22-bus signals are bidirectional and use terminations for a negated (high) signal 
level. Devices connect to these lines by way of high-impedance bus receivers and open 
collector drivers. The asserted state is produced when a bus driver asserts the line low. 

Although bidirectional lines are electrically bidirectional (any point along the line can be 
driven or received), certain lines are functionally unidirectional. These lines communicate 
to or from a bus master (or signal source), but not both. Interrupt acknowledge (BIAK) 
and direct memory access grant (BDMG) signals are physically unidirectional in a daisy- 
chain fashion. These signals originate at the processor output signal pins. Each is 
received on device input pins (BIAKI or BDMGI) and is conditionally retransmitted 
tvirough device output pins (BIAKO or BDMGO). These signals are received from 
higher priority devices and are retransmitted to lower priority devices along the bus, 
establishing the position-dependent priority scheme. 
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A.1.1 Master/Slave Relationship 

Communication between devices on the bus is asynchronous. A master/slave relationship 
exists throughout each bus transaction. Only one device has control of the bus at any 
one time. This controlling device is called the bus master, or arbiter. The master device 
controls the bus when communicating with another device on the bus, called the slave. 

The bus master (typically the processor or a DMA device) initiates a bus transaction. The 
slave device responds by acknowledging the transaction in progress and by receiving data 
from, or transmitting data to, the bus master. Q22-bus control signals transmitted or 
received by the bus master or bus slave device must complete the sequence according to 
bus protocol. 

The processor controls bus arbitration, that is, which device becomes bus master at any 
given time. A typical example of this master-slave relationship is a disk drive, as master, 
transferring data to memory as slave. Communication on the Q22-buEi is interlocked so 
that, for certain control signals issued by the master device, there must be a response 
from the slave in order to complete the transfer. It is the master/slave signal protocol 
that makes the Q22-bus asynchronous. The asynchronous operation precludes the need 
for synchronizing with, and waiting for, clock pulses. 

Since completion of the bus cycle by the bus master requires response from the slave 
device, each bus master must include a timeout error circuit that aborts the bus cycle if 
the slave does not respond to the bus transaction within 10 ps. The actual time before 
a timeout error occurs must be longer than the reply time of the slowest peripheral or 
memory device on the bus. 

A.2 Q22-bus Signal Assignments 

Table A-1 lists the data and address signal assignments. Table A— 2 lists the control 
signal assignments. Table A-3 lists the power and ground signal assignments. Table A— 4 
lists the spare signal assignments. 

Table A-1 Data and Address Signal Assignments 

Data and Address Signal Pin Assignment 

BDALO AU2 

BDALl AV2 

BDAL2 BE2 

BDAL3 BF2 

BDAL4 BH2 

BDAL5 BJ2 

BDAL6 BK2 

BDAL7 BL2 

BDAL8 BM2 

BDAL9 BN2 

BDALIO BP2 

BDALll BR2 

BDAL12 BS2 
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Table A-1 (Com.) Data and Address Signal Assignments 

Data and Address Signal Pin Assignment 

BDAL13 BT2 

BDAL14 BU2 

BDAH5 BV2 

BDAL16 ACl 

BDAL17 ADl 

BDAL18 BCl 

BDAL19 BDl 

BDAL20 BEl 

BDAL21 BFl 



Table A-2 Control Signal Assignments 



Control Signal Pin Assignment 



Data Control 

BDOUT AE2 

BRPLY AF2 

BDIN AH2 

BSYNC AJ2 

BWTBT AK2 

BBS7 AP2 

Interrupt Control 

BIRQ7 BPl 

BIRQ6 ABl 

BIRQ5 AAl 

BIRQ4 AL2 

BIAKO AN2 

BIAKI AM2 

DMA Control 

BDMR ANl 

BSACK BNl 

BDMGO AS2 
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Table A-2 (Com.) Control Signal Assignments 



Control Signal Pin Assignment 



BDMGI AR2 

System Control 

BHALT API 

BREF ARl 

BEVNT BRl 

BINIT AT2 

BDCOK BAl 

BPOK BBl 



Table A-3 Power and Ground Signal Assignments 



Power and Ground Pin Assignment 

+5 B (battery) or ASl 
+12 B (battery) 

+12 B BSl 

+5 B AVI 

+5 AA2 

+5 BA2 

+5 BVl 

+12 AD2 

+12 BD2 

+12 AB2 

-12 AB2 

-12 BB2 

GND AC2 

GND AJl 

GND AMI 

GND ATI 

GND BC2 

GND BJl 

GND BMl 

GND BTl 
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Table A-4 Spare Signal Assignments 



Spare 



Pin Assignment 



SSparel 

SSpare3 

SSpareS 

SSpare2 

MSpareA 

MSpareB 

MSpareB 

MSpareB 

PSparel 

ASpare2 



AEl 
AHl 
BHl 
AFl 
AKl 
ALl 
BKl 
BLl 
AUl 
BUI 



A.3 Data Transfer Bus Cycles 



Data transfer bus cycles, executed by bus master devices, transfer 32-bit words or 8- 
bit bytes to or from slave devices. In block mode, multiple words can be transferred to 
sequential word addresses, starting from a single bus address. Table A-5 lists the data 
transfer bus cycles. 

Table A-5 Data Transfer Operations 



Bus Cycle 


Definition 


Function (with respect to the 
bus master) 


DATI 


Data word input 


Read 


DATO 


Data word output 


Write 


DATOB 


Data byte output 


Write-byte 


DATIO 


Data word input/output 


Read-modify-write 


DATIOB 


Data word input/byte output 


Read-modify-write byte 


DATBI 


Data block input 


Read block 


DATBO 


Data block output 


Write block 



The bus signals listed in Table A-6 are used in the data transfer operations described in 
Table A-5. 
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Table A-6 Bus Signals for Data Transfers 



Signal 



BDAL<21:00> L 



BSYNCL 
BDINL 
BDOUTL 
BRPLY L 

BWTBTL 
BBS7 



Definition 



22 data/address lines 



Function 



Bus cycle control 

Data input indicator 

Data output indicator 

Slave's acknowledge of bus 
cycle 

Write/byte control 

I/O device select 



BDAL<15:00> L are used for word and 
byte transfers. BD./U.i<17:16> L are used 
for extended addressing, memory parity 
error (16), and memoty parity error 
enable (17) functions. BDAL<21:18> L 
are used for extended addressing beyond 
256 Kbytes. 

Indicates bus transaction in progress. 

Strobe signals 

Strobe signals 

Strobe signals 

Control signals 

Indicates address is in the I/O page. 



Data transfer bus cycles can be reduced to five basic types: DATI, DATO(B), DATIO(B), 
DATBI, and DATBO. These transactions occur between the bus master and one slave 
device selected during the addressing part of the bus cycle. 



A.3.1 Bus Cycle Protocol 

Before initiating a bus cycle, the previous bus transaction must have been completed 
(BSYNC L negated) and the device must become bus master. The bus cycle can be 
divided into two parts - addressing and data transfer. 

• During addressing, the bus master outputs the address for the desired slave device, 
memory location, or device register. The selected slave device responds by latching 
the address bits and holding this condition for the duration of th(j bus cycle until 
BSYNC L becomes negated. 

• During the data transfer, the actual data transfer occurs. 
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A.3.2 Device Addressing 

Device addressing of a data transfer bus cycle comprises an address setup and deskew 
time, and an address hold and deskew time. During address setup and deskew time, the 
bus master does the following operations: 

• Asserts BDAL<21:00> L with the desired slave device address bits. 

• Asserts BBS7 L if a device in the I/O page is being addressed. 

• Asserts BWTBT L if the cycle is a DATO(B) or DATBO bus cycle. 

During this time, the address (BBS7 L) and BWTBT L signals are asserted at the slave 
bus receiver for at least 75 ns before BSYNC goes active. Devices in the I/O page ignore 
the 9 high-order address bits BDAL<21:13>, and instead, decode BBS7 L along with 
the 13 low-order address bits. An active BWTBT L signal during address setup time 
indicates that a DATO(B) or DATBO operation follows, while an inactive BWTBT L 
indicates a DATI, DATBI, or DATIO(B) operation. 

The address hold and deskew time begins after BSYNC L is asserted. 

The slave device uses the active BSYNC L bus received output to clock BDAL address 
bits, BBS7 L, and BWTBT L into its internal logic. BDAL<21:00> L, BBS7 L, and 
BWTBT L remain active for 25 ns minimum after the BSYNC L bus receiver goes active. 
BSYNC L remains active for the duration of the bus cycle. 

Memory and peripheral devices are addressed similarly, except for the way the slave 
device responds to BBS7 L. Addressed peripheral devices must not decode address bits on 
BDAL<21:13> L. Addressed peripheral device can respond to a bus cycle when BBS7 L is 
asserted (low) during the addressing of the cycle. 

When asserted, BBS7 L indicates that the device address resides in the I/O page (the 
upper 4K address space). Memory devices generally do not respond to addresses in the 
I/O page; however, some system applications may permit memory to reside in the I/O 
page for use as DMA buffers, read-only memory bootstraps, and diagnostics. 

DATI 

The DATI bus cycle (Figure A-1) is a read operation. During DATI, data is input to the 
bus master. Data consists of 16-bit word transfers over the bus. During data transfer of 
the DATI bus cycle, the bus master asserts BDIN L 100 ns minimum aft«r BSYNC L is 
asserted. The slave device responds to BDIN L active as follows: 

• Asserts BRPLY L between ns (minimum) and 8 ns (maximum, to avoid bus timeout) 
after receiving BDIN L, and 125 ns (maximum) before BDAL bus driver data bits are 
valid. 

• Asserts BDAL<21:00> L with the addressed data and error information ns 
(minimum) after receiving BDIN, and 125 ns (maximum) after assertion of BRPLY. 
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BUS MASTER 
PROCESSOR OR DEVICE 

ADDRESS DEVICE OR MEMORY 

ASSERT 8DAL <21:00> L WITH 

ADDRESS AND 

ASSERT BBS7 IF THE ADDRESS 

IS IN THE I/O PAGE 

ASSERT BSYNC L 



SLAVE 
MEMORY OR DEVICE 



REQUEST DATA 

REMOVE THE ADDRESS FROM 
BDAL<21:00> LAND 
NEGATE BBS7 L 
ASSERT BOIN L 



TERMINATE INPUT TRANSFER 
ACCEPT DATA AND RESPOND 
BY NEGATING BDIN L 



DECODE ADDRESS 

STORE device: SELECTED' 
OPERATION 



INPUT DATA 

PLACE DATA ON BDAL < 15:00> L 
- ASSERT BRPLY L 



TERMINATE BUS CYCLE 
NEGATE BSYNC L 



OPERATION COMPLETED 
NEGATE BRPLY L 



MH 6076 
MA-t074-87 



Figure A-1 DATI Bus Cycle 

When the bus master receives BRPLY L, it does the following: 

• Waits at least 200 ns deskew time, then accepts input data at BDAL<17:00> L bus 
receivers. BDAL <17:16> L are used for transmitting parity errors to the master. 

• Negates BDIN L 200 ns (minimum) to 2 ]xs (maximum) after BRPLY L goes active. 

The slave device responds to BDIN L negation by negating BRPLY L and removing 
read data from BDAL bus drivers. BRPLY L must be negated 100 ns (maximum) before 
removing read data. The bus master responds to the negated BRPLY L by neeatine 
BSYNC L. 

Conditions for the next BSYNC L assertion are as follows: 

• BSYNC L must remain negated for 200 ns (minimum). 

• BSYNC L must not become asserted within 300 ns of previous BRPLY L negation. 



Q22-bus Specification 329 



Figure A-2 shows DATI bus cycle timing. 



NOTE 



When BSYNC L is continuously asserted, the bus master retains control of the 
bus and the previously addressed slave device remains selected. This « done 
for DATIO(B) bus cycles where DATO or DATOB follows a DAT! without BSYNC 
L negation and a second device addressing operation. Also, a slow slave device 
can hold off data transfers to itself by keeping BRPLY L asserted, which causes 
the master to keep BSYNC L asserted. 
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TIMING AT SLAVE DEVICE 
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BUS OBIVER™NPUTS AND BUS RECEIVER OUTPUTS SIGNAL NAMES INCLUDE A •■3- PREFIX. 

2 SIGNALNAMEPREFIXESAREDEflNEO BELOW 4 DON'T CARE CONDITION. 

T . BUS DRIVER INPUT 
R . BUS RECEIVER OUTPUT 



Figure A-2 DATI Bus Cycle Timing 



DATOB 



DATOB (Figure A-3) is a write operation. Data is transferred in 32-bit words (DATO) or 
8-bit bytes (DATOB) from the bus master to the slave device. The data transfer output 
can occur after the addressing part of a bus cycle when BWTBT L ^as been asserted by 
the bus master, or immediately following an input transfer part of a DATIOB bus cycle. 



330 Q22-bus Specification 



BUS MASTER 
(PROCESSOR OR DEVICE! 

ADDRESS DEVICE 'MEMORY 
ASSERT BDAL 21 00 • L WITH 
ADDRESS AND 

ASSERT B8S7 L IF ADDRESS IS 
IN THE rO PAGE 
ASSERT BWTBT L iWRlTE 
CYCLEl 
ASSERT BSYNC L 



SLAVE 
(MEMORY OR DEVICE) 



DECODE ADDRESS 

STORE DEVICE SELECTED 
OPERATION 



OUTPUT DATA 

REMOVE THE ADDRESS FROM 
BDAL • 21 00 ■ L AND NEGATE BBS7 L 
NEGATE BWTBT L UNLESS DATOB 
PLACE DATA ON BDAL ■ IS 00> L 
ASSERT BDOUT L ' ^ 



TAKE DATA 

RECEIVE DATA FROM BDAL 

LINES 

ASSERT BRPLY L 



TERMINATE OUTPUT TRANSFER 
NEGATE BOOUT L (AND BWTBT L 
IF IN A DATOB BUS CYCLEl 
REMOVE DATA FROM BDAL < 15:00> L__^ 



OPERATION COMPLETED 
NEGATE BRPLY L 



TERMINATE BUS CYCLE 
NEGATE BSYNC L 



Figure A-3 DATO or DATOB Bus Cycle 

The data transfer part of a DATOB bus cycle comprises a data setup and deskew time 
and a data hold and deskew time. 

During the data setup and deskew time, the bus master outputs the data on 
BDAL<15:00> L at least 100 ns after BSYNC L assertion. BWTBT L remains negated for 
the length of the bus cycle. If the transfer is a byte transfer, BWTBT L remains asserted. 
If it is the output of a DATIOB, BWTBT L becomes asserted and lasts the duration of the 
bus cycle. 

During a byte transfer, BDAL<00> L selects the high or low byte. This occurs in the 
addressing part of the cycle. If asserted, the high byte (BDAL<15:08> L) is selected; 
otherwise, the low byte (BDAL<07:00> L) is selected. An asserted BD^U^ 16 L at this 
time forces a parity error to be written into memory if the memory is a parity-type 
memory. BDAL 17 L is not used for write operations. The bus master asserts BDOUT 
L at least 100 ns after BDAL and BDWTBT L bus drivers are stable. The slave device 
responds by asserting BRPLY L within 10 ps to avoid bus timeout. This completes the 
data setup and deskew time. 
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During the data hold and deskew time, the bus master receives BRPLY L and negates 
BDOUT L, which must remain asserted for at least 150 ns from the receipt of BRPLY L 
before being negated by the bus master. BDAL<17:00> L bus drivers remain asserted for 
at least 100 ns after BDOUT L negation. The bus master then negates BDAL inputs. 

During this time, the slave device senses BDOUT L negation. The data is accepted 
and the slave device negates BRPLY L. The bus master responds by negating BSYNC 
L However, the processor does not negate BSYNC L for at least 175 ns after negating 
BDOUT L This completes the DATOB bus cycle. Before the next cycle, BSYNC L must 
remain unasserted for at least 200 ns. Figure A-4 shows DATOB bus cycle timing. 
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Figure A-4 DATO or DATOB Bus Cycle Timing 
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DATIOB 



The protocol for a DATIOB bus cycle (Figure A-5) is identical to the addressing and data 
transfer part of the DAT! and DATOB bus cycles. After addressing the device, a DATI 
cycle is performed as explained in the DATI section; however, BSYNC L is not negated. 
BSYNC L remains active for an output word or byte transfer (DATOB). The bus master 
maintains at least 200 ns between BRPLY L negation during the DATI cycle and BDOUT 
L assertion. The cycle is terminated when the bus master negates BSYll^C L, as described 
for DATOB. Figure A-6 shows the DATIOB bus cycle timing. 



BUS MASTER 
(PROCESSOR OH DEVICE. 

AOORESS DEVICE MEMORY 

ASSERT BDAL -21 00 • L WITH 

ADDRESS 

ASSERT 8BS7 LIF THE 

ADDRESS IS IN THE I O PAGE 

ASSERT BSYNC L 



SLAVE 
IMEMORY OR DEVICE: 



DECODE ADDRESS 

STORE DEVICE SELECTED 
OPERATION 



REQUEST DATA 

REMOVE THE ADDRESS FROM 
BDAL -.21 OOV- L 
ASSERT BDIN L 



it^jPUT DATA 

PLACE DATA ON BDAL < 16:00 > L 
ASSERT BRPLY L 



TERMINATE INPUT TRANSFER 

ACCEPT DATA AND RESPOND BY 
TERMINATING BDIN L 



COMPLETE INPUT TRANSFER 
REMOVE DATA 
NEGATE BRPLY L 



OUTPUT DATA 

PLACE OUTPUT DATA ON BDAL < 15 00 ,- L 
lASSERT BWTST L IF AN OUTPUT 
BYTE TRANSFERl 
ASSERT BDOUT L 



TAKE DATA 

RECEIVE DATA FROM BDAL LINES 
ASSERT BRPLY L 



TERMINATE OUTPUT TRANSFER 

REMOVE DATA FROM BDAL LINES 
NEGATE BDOUT L 



TERMINATE BUS CYCLE 
NEGATE BSYNC L 
(AND BWTBT L IF IN 
A OATIOB BUSCYCLEi 



OPERATION COMPLETED 
NEGATE BRPLY L 



Figure A-5 DATIO or DATIOB Bus Cycle 
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Figure A-6 DATIO or DATIOB Bus Cycle Timing 
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A.4 Direct Memory Access 

The direct memory access (DMA) capability allows direct data transfer between I/O 
devices and memory This is useful when using mass storage devices (for example, disks) 
that move large blocks of data to and from memory. A DMA device needs to be supplied 
with only the starting address in memory, the starting address in mass storage, the 
length of the transfer, and whether the operation is read or write. When this information 
is available, the DMA device can transfer data directly to or from memory. Since most 
DMA devices must perform data transfers in rapid succession or lose data, DMA devices 
are given the highest priority. 

DMA is accomplished after the processor (normally bus master) has passed bus 
mastership to the highest priority DMA device that is requesting the bus. The processor 
arbitrates all requests and grants the bus to the DMA device electrically closest to it. 
A DMA device remains bus master until it relinquishes its mastership. The following 
control signals are used during bus arbitration: 

• BDMGI L DMA grant input 

• BDMGO L DMA grant output 

• BDMR L DMA request line 

• BSACK L bus grant acknowledge 

A.4.1 DMA Protocol 

A DMA transaction can be divided into the following three phases: 

• Bus mastership acquisition phase 

• Data transfer phase 

• Bus mastership relinquishment phase 

During the bus mastership acquisition phase, a DMA device requests the bus by 
asserting BDMR L. The processor arbitrates the request and initiates the transfer of 
bus mastership by asserting BDMGO L. 

The maximum time between BDMR L assertion and BDMGO L assertion is DMA latency. 
This time is processor-dependent. BDMGO L/BDMGI L is one signal that is daisy- 
chained through each module in the backplane. 

BDMGO L/BDMGI L is driven out of the processor on the BDMGO L pin, enters each 
module on the BDMGI L pin, then exits on the BDMGO L pin. This signal passes 
through the modules in descending order of priority, until it is stopped by the requesting 
device. The requesting device blocks the output of BMDGO L and asserts BSACK L. If 
BDMR L is continuously asserted, the bus hangs. 

During the data transfer phase, the DMA device continues asserting BSACK L. The 
actual data transfer is performed as described earlier. 

The DMA device can assert BSYNC L for a data transfer 250 ns (minimum) after it 
received BDMGI L and its BSYNC L bus receiver is negated. 

During the bus mastership relinquishment phase, the DMA device gives up the bus by 
negating BSACK L. This occurs after completing (or aborting) the last data transfer 
cycle (BRPLY L negated). BSACK L can be negated up to a maximum of 300 ns before 
negating BSYNC L. 
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NOTE 

If multiple data transfers are performed during this phase, consideration must 
be given to the use of the bus for other system functions, such as memors;^ 
refiresh (if required). 

Figure A-7 shows the DMA protocol, and Figure A-8 shows DMA request/grant timing. 

PROCESSOR BUS MASTEfl 

MEMORY IS SLAVE CONTROLLER 



REQUEST BUS 
ASSERT BDMR 



GRANT BUS CONTROL y 

NEAR THE END OF THE -^ 
CURRENT BUS CYCLE ^ 
(BRPLY L IS NEGATED) 
ASSERT BDMGO L AND ^ 
INHIBIT NEW PROCESSOR 



GENERATED BSYNC L FOUR 



\ 



N 



THE DURATION OF THE y 

DMA OPERATION ^ 



/ 



ACKNOWLEDGE BUS 
'^ MASTERSHIP 
RECEIVE BOMG 
y ' WAIT FOR NEGATION OF 
BSYNC L AND BRPLY L 



/ ASSERT BSACK L 

/ NEGATE BDMR L 

TERMINATE GRANT ■^ 

SEQUENCE 

NEGATIVE BDMGO L AND 

WAIT FOR DMA OPERATION 

TO BE COMPLETED EXECUTE A DMA DATA 

TRANSFER 
MONITOR TRANSACTION TO ADDRESS MEMORY AND 

INVALIDATE CACHE IF .^ TRANSFER UP TO 4 WORDS 

CACHE HIT .^ Qp QK'^k AS DESCRIBED 

■^ ^ FOR DATI OR DATO BUS 

•*. CYCLES 

RELEASE THE BUS BY 
TERMINATING BSACK L 
RESUME PROCESSOR /' (NO SOONER THAN 

OPERATION y NEGATION OF LAST BRPLY L) 

ENABLE PROCESSOR ^ '^ AND BSYNC L 

GENERATED BSYNC L 
(PROCESSOR IS BUS 

MASTER) OR ISSUE WAIT FOUR uS OR UNTIL 

ANOTHER GRANT IF BDMR ANOTHER FIFO TRANSFER 

L IS ASSERTED IS PENDING BEFORE 

REQUESTING BUS AGAIN 

M* XOOeS S9A 



Figure A-7 DMA Protocol 
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Figure A-8 DMA Request/Grant Timing 



A.4.2 Block Mode DMA 

For increased throughput, block mode DMA can be implemented on a device for use with 
memories that support this type of transfer. In a block mode transaction, the starting 
memory address is asserted, followed by data for that address, and data for consecutive 
addresses. 

By eliminating the assertion of the address for each data word, the transfer rate is almost 
doubled. 

There are two types of block mode transfers, DATBI (input) and DATBO (output). 

• Section A.4.2. 1 describes the DATBI bus cycle (Figure A-9). 

• Section A.4.2.2 describes the DATBO bus cycle (Figure A-10). 
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Figure A-9 DATBI Bus Cycle Timing 
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Figure A-10 OATBO Bus Cycle Timing 

A.4.2.1 DATBI Bus Cycle 

Before a DATBI block mode transfer can occur, the DMA bus master device must request 
control of the bus. This occurs under conventional Q22-bus protocol. 

A block mode DATBI transfer is executed as follows: 

• Address device memory. The address is asserted by the bus master on 

TADDR<21:00> along with the negation of TWTBT. The bus master asserts TSYNC 
150 ns (minimum) after gating the address onto the bus. 
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• Decode the address. The appropriate memory device recognizes that it must 
respond to the address on the bus. 

• Request the data. The address is removed by the bus master from TADDR<21:00> 
100 ns (minimum) after the assertion of TSYNC. The bus master asserts the first 
TDIN 100 ns (minimum) after asserting TSYNC. The bus master asserts TBS7 50 
ns (maximum) after asserting TDIN for the first time. TBS7 remains asserted until 
50 ns (maximum) after the assertion of TDIN for the last time. In each case, TBS7 
can be asserted or negated as soon as the conditions for asserting TDIN are met. The 
assertion of TBS7 indicates the bus master is requesting another read cycle after the 
current read cycle. 

• Send the data. The bus slave asserts TRPLY between ns (minimum) and 8000 ns 
(maximum, to avoid a bus timeout) after receiving RDIN. The bus slave asserts TREF 
concurrent with TRPLY if, and only if, it is a block mode device which can support 
another RDIN after the current RDIN. The bus slave gates TDATA<15:00> onto the 
bus ns (minimum) after receiving RDIN and 125 ns (maximum) after the assertion 
of TRPLY. 

NOTE 

Block mode transfers must not cross 16-word boundaries. 

• Terminate the input transfer. The bus master receives stable RDATA<15:00> from 
200 ns (maximum) after receiving RRPLY until 20 ns (minimum) after the negation 
of RDIN. (The 20 ns minimum represents total minimum receiver delays for RDIN at 
the slave and RDATA<15:00> at the master.) The bus master negates TDIN 200 ns 
(minimum) after receiving RRPLY. 

• Operation completed. The bus slave negates TRPLY ns (minimum) after 
receiving the negation of RDIN. If RBS7 and TREF are both asserted when TRPLY 
negates, the bus slave prepares for another DIN cycle. RBS7 is stable from 125 ns 
after RDIN is received until 150 ns after TRPLY negates. If TBS7 and RREF were 
both asserted when TDIN negated, the bus master asserts TDIN 150 ns (minimum) 
after receiving the negation of RRPLY and continues with the timing relationship 
in send data above. RREF is stable from 75 ns after RRPLY asserts until 20 ns 
(minimum) after TDIN negates. (The ns minimum represents total minimum 
receiver delays for RDIN at the slave and RREF at the master.) 

NOTE 

The bus master must limit itself to not more than eight transfers, unless it 
monitors RDMR. If the bus master monitors RDMR, it may perform up to 16 
transfers as long as RDMR is not asserted at the end of the seventh transfer. 

• Terminate the bus cycle. RBS7 and TREF were not both asserted when TRPLY 
negated, the bus slave removes TDATA<15:00> from the bus ns (minimum) and 100 
ns (maximum) after negating TRPLY. If TBS7 and RREF were not both asserted 
when TDIN negated, the bus master negates TSYNC 250 ns (minimum) after 
receiving the last assertion of RRPLY and ns (minimum) after the negation of 
that RRPLY. 

• Release the bus. The DMA bus master negates TSACK ns after negation of the 
last RRPLY. The DMA bus master negates TSYNC 300 ns (maximum) after it negates 
TSACK. The DMA bus master must remove RDATA<15:00>, TBS7, and TWTBT from 
the bus 100 ns (maximum) after clearing TSYNC. 

At this point the block mode transfer is complete, and the bus arbitration logic in the 
CPU enables processor-generated TSYNC or issues another bus grant (TDMGO) if RDMR 
is asserted. 
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A.4.2.2 DATBO Bus Cycle 

Before a block mode transfer can occur, the DMA bus master device must request control 
of the bus. This occurs under conventional Q22-bus protocol. 

A block mode DATBO transfer is executed as follows: 

• Address device memoiy. The address is asserted by the bus master on 
TADDR<21:00> along with the aasertion of TWTBT. The bus master asserts TSYNC 
150 ns (minimum) after gating the address onto the bus. 

• Decode address-the appropriate memory device recognizes that it must respond to 
the address on the bus. 

• Send data. The bus master gates TDATA<15:00> along with TVVTBT 100 ns 
(minimum) after the assertion of TSYNC. TWTBT is negated. The bus master asserts 
the first TDOUT 100 ns (minimum) after gating TDATA<15:00>. 

NOTE 

During DATBO cycles, TBS7 is undefined. 

• Receive data. The bus slave receives stable data on RDATA<15:00> from 25 ns 
(minimum) before receiving RDOUT until 25 ns (minimum) after receiving the 
negation of RDOUT. The bus slave asserts TRPLY ns (minimum) after receiving 
RDOUT. The bus slave asserts TREF concurrent with TRPLY if, and only if, it is a 
block mode device which can support another RDOUT after the current RDOUT. 

NOTE 

Block mode transfers must not cross 16- word boundaries. 

• Terminate the output transfer. The bus master negates TDOUT 150 ns 
(minimum) after receiving RRPLY. 

• Operation completed. The bus slave negates TRPLY ns (minimum) after 
receiving the negation of RDOUT. If RREF was asserted when TDOUT negated 
and if the bus master wants to transfer another word, the bus master gates the new 
data on TDATA<15:00> 100 ns (minimum) after negating TDOUT. RREF is stable 
from 75 ns (maximum) after RRPLY asserts until 20 ns (minimum) after RDOUT 
negates. (The 20 ns minimum represents minimum receiver delays for RDOUT at the 
slave and RREF at the master). The bus master asserts TDOUT 100 ns (minimum) 
after gating new data on TDATA<15:00> and 150 ns (minimum) after receiving the 
negation of RRPLY. The cycle continues with the timing relation sliip in receive data 
above. 

NOTE 

The bus master must limit itself to not more than eight transfers unless it 
monitors RDMR. If the bus master monitors RDMR, it may perform up to 16 
transfers as long as RDMR is not asserted at the end of the seventh transfer. 

• Terminate the bus cycle. If RREF was not asserted when RRPLY negated or if 
the bus master has no additional data to transfer, the bus master removes data on 
TDATA<15:00> from the bus 100 ns (minimum) after negating TDOUT. If RREF 
was not asserted when TDOUT negated, the bus master negates TSYNC 275 ns 
(minimum) after receiving the last RRPLY and ns (minimum) after the negation of 
the last RRPLY. 
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• Release the bus. The DMA bus master negates TSACK ns after negation of the 
last RRPLY. The DMA bus master negates TSYNC 300 ns (maximum) after it negates 
TSACK. The DMA bus master must remove TDATA, TBS7, and TWTBT from the bus 
100 ns (maximum) after clearing TSYNC. 

At this point the block mode transfer is complete, and the bus arbitration logic in the 
CPU enables processor-generated TSYNC or issues another bus grant (TDMGO) if RDMR 
is asserted. 

A.4.3 DMA Guidelines 

The following is a list of DMA guidelines: 

• Systems with memory refresh over the bus must not include devices that perform 
more than one transfer per acquisition. 

• Bus masters that do not use block mode are limited to four DATI, four DATO, or two 
DATIO transfers per acquisition, 

• Block mode bus masters that do not monitor BDMR are limited to eight transfers per 
acquisition. 

• If BDMR is not asserted after the seventh transfer, block mode bus masters that do 
monitor BDMR may continue making transfers until the bus slave fails to assert 
BREF, or until they reach the total maximum of 16 transfers. Otherwise, they stop 
after eight transfers. 

A.5 Interrupts 

The interrupt capability of the Q22-bus allows an I/O device to temporarily suspend 
(interrupt) current program execution and divert processor operation to service the 
requesting device. The processor inputs a vector from the device to start the service 
routine (handler). Like the device register address, hardware fixes the device vector at 
locations within a designated range below location 001000. The vector indicates the first 
of a pair of addresses. The processor reads the contents of the first address, the atartmg 
address of the interrupt handler. The contents of the second address is a new processor 
status word (PS). 

The new PS can raise the interrupt priority level, thereby preventing lower-level 
interrupts from breaking into the current interrupt service routine. Control is returned 
to the interrupted program when the interrupt handler is ended. The original mterrupted 
program's address (PC) and its associated PS are stored on a stack. The original PC and 
PS are restored by a return from interrupt (RTI or RTT) instruction at the end of the 
handler. The use of the stack and the Q22-bus interrupt scheme can allow interrupts to 
occur within interrupts (nested interrupts), depending on the PS. 

Interrupts can be caused by Q22-bus options or the MicroVAX CPU. Those interrupts that 
originate from within the processor are called traps. Traps are caused by programmmg 
errors, hardware errors, special instructions, and maintenance features. 

The following Q22-bus signals are used in interrupt transactions: 
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Signal Definition 



BIRQ4 L Interrupt request priority level 4 

BIRQ5 L Interrupt request priority level 5 

BIRQ6 L Interrupt request priority level 6 

BIRQ7 L Interrupt request priority level 7 

BIAKI L Interrupt acknowledge input 

BIAKO L Interrupt acknowledge output 

BDAL<21:00> Data/address lines 

BDIN L Data input strobe 

BRPLY L Reply 



A.5.1 Device Priority 

The Q22-bus supports the following two methods of device priority: 

• Distributed arbitration — priority levels are implemented on the hardware. When 
devices of equal priority level request an interrupt, priority is given to the device 
electrically closest to the processor. 

• Position-defined arbitration — priority is determined solely by electrical position on 
the bus. The closer a device is to the processor, the higher its priority. 

A.5.2 Interrupt Protocol 

Interrupt protocol on the Q22-bus has three phases: 

• Interrupt request 

• Interrupt acknowledge and priority arbitration 

• Interrupt vector transfer phase 

The interrupt request phase begins when a device meets its specific conditions for 
interrupt requests. For example, the device is ready, done, or an error occurred. The 
interrupt enable bit in a device status register must be set. The device then initiates 
the interrupt by asserting the interrupt request line(s). BIRQ4 L is the lowest hardware 
priority level and is asserted for all interrupt requests for compatibility with previous 
Q22-bus processors. The level at which a device is configured must also be asserted. A 
special case exists for level 7 devices that must also assert level 6. The following list 
gives the interrupt levels and the corresponding Q22-bus interrrupt request lines. For an 
explanation, refer to Section A.5.3. 

Interrupt Level Lines Asserted by Device 

4 BIRQ4 L 

5 BIRQ4 L, BIRQ5 L 

6 BIRQ4 L, BIRQ6 L 

7 BIRQ4 L, BIRQ6 L, BIRQ7 L 

Figure A-11 shows the interrupt request/acknowledge sequence. 
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STROBE INTERRUPTS 
ASSERT BDIM L 



GRANT REQUEST 

PAUSE AND ASSERT 8IAK0 1. 



INITIATE REQUEST 
ASSERT BIRD L 



RECEIVE BDIN L 

STORE "INTERRUPT SENDING" 
m DEVICE 



RECEIVE BIAKI L 

RECEIVE BIAKI LAND INHIBIT 

BIAKO L 

PLACE VECTOR ON BOAL < 15:00 > I 

ASSERT BRPLV L 

NEGATE BIRQ L 



RECEIVE VECTOR AND 

TERMINATE RcOUEST 
INPUT VECTOR ADDRESS 
NEGATE BDIN L AND BIAKO 



COMPLETE VECTOR TRANSFER 

REMOVE VECTOR FROM BDAL BUS 
NEGATE BRPLY l 



PROCESS THE INTERRUPT 

SAVE INTERRUPTED PROGRAM 
PC AND PS ON STACK 
LOAD NEW PC AND PS FROM 
VECTOR ADDRESSED LOCATION 
EXECUTE INTERRUPT SERVICE 
ROUTINE FOR THE DEVICE 



Figure A-11 Interrupt Request/Acknowledge Sequence 

The interrupt request line remains asserted until the request is acknowledged. 

During the interrupt acknowledge and priority arbitration phase, the processor 
acknowledges interrupts under the following conditions: 

• The device interrupt priority is higher than the current PS<7:5>. 

• The processor has completed instruction execution and no additional bus cycles are 
pending. 

The processor acknowledges the interrupt request by asserting BDIN L, and 150 ns 
(minimum) later asserting BIAKO L. The device electrically closest to the processor 
receives the acknowledge on its BIAKI L bus receiver. 

At this point, the two types of arbitration must be discussed separately. If the device that 
receives the acknowledge uses the four-level interrupt scheme, it reacts as follows: 

• If not requesting an interrupt, the device asserts BIAKO L and the acknowledge 
propagates to the next device on the bus. 
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If the device is requesting an interrupt, it must check that no higher-level device is 
currently requesting an interrupt. This is done by monitoring higjher-level request 
lines. The following table lists the lines that need to be monitored by devices at each 
priority level: 



Device Priority Level 



Line(8) Monitored 



BIRQ5, BIRQ6 

BIRQ6 

BIRQ7 



In addition to asserting levels 7 and 4, level 7 devices must drive level 6. This is done 
to simplify the monitoring and arbitration by level 4 and 5 devices. In this protocol, 
level 4 and 5 devices need not monitor level 7, because level 7 devices assert level 
6. Level 4 and 5 devices become aware of a level 7 request because they monitor the 
level 6 request. This protocol has been optimized for level 4, 5, and 6 devices, since 
level 7 devices are very seldom necessary. 

• If no higher-level device is requesting an interrupt, the acknowledge is blocked by 
the device. (BIAKO L is not asserted.) Arbitration logic within the device uses the 
leading edge of BDIN L to clock a flip-flop that blocks BIAKO L. Arbitration is won 
and the interrupt vector transfer phase begins. 

• If a higher-level request line is active, the device disqualifles itself and asserts BIAKO 
L to propagate the acknowledge to the next device along the bus. 

Signal timing must be considered carefully when implementing four-level interrupts 
(Figure A-12). 
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Figure A-12 Interrupt Protocol Timing 
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If a single-level interrupt device receives the acknowledge, it reacts as follows: 

• If not requesting an interrupt, the device asserts BIAKO L and the acknowledge 
propagates to the next device on the bus. 

• If the device was requesting an interrupt, the acknowledge is blocked using the 
leading edge of BDIN L, and arbitration is won. The interrupt vector transfer phase 
begins. 

The interrupt vector transfer phase is enabled by BDIN L and BIAKI L. The device 
responds by asserting BRPLY L and its BDAL<15:00> L bus driver inputs with the vector 
address bits. The BDAL bus driver inputs must be stable within 125 ns (maximum) after 
BRPLY L is asserted. The processor then inputs the vector address and negates BDIN L 
and BIAKO L. The device then negates BRPLY L and 100 ns (maximum) later removes 
the vector address bits. The processor then enters the device's service routine. 

NOTE 

Propagation delay from BIAKI L to BIAKO L must not be greater than 500 ns 
per Q22-bus slot. The device must assert BRPLY L within 10 ps (maximum) after 
the processor asserts BIAKI L. 

A.5.3 Q22-bus Four-Level Interrupt Configurations 

If you have high-speed peripherals and desire better software performance, you can 
use the four-level interrupt scheme. Both position-independent and position-dependent 
configurations can be used with the four-level interrupt scheme. 

Figure A-13 shows the position-independent configuration. This allows peripheral 
devices that use the four-level interrupt scheme to be placed in the backplane in any 
order. These devices must send out interrupt requests and monitor higher-level request 
lines as described. The level 4 request is always asserted from a requesting device 
regardless of priority. If two or more devices of equally high priority request an interrupt, 
the device physically closest to the processor wins arbitration. Devices that use the 
single-level interrupt scheme must be modified, or placed at the end of the bus, for 
arbitration to function properly. 
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Figure A~13 Position-independent Configuration 

Figure A-14 shows the position-dependent configuration. This configuration is simpler 
to implement. A constraint is that peripheral devices must be inserted with the highest 
priority device located closest to the processor, and the remaining devices placed in the 
backplane in decreasing order of priority (with the lowest priority devices farthest from 
the processor). With this configuration, each device has to assert only its own level and 
level 4. Monitoring higher-level request lines is unnecessary. Arbitration is achieved 
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through the physical positioning of each device on the bus. Single-level interrupt devices 
on level 4 should be positioned last on the bus. 
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Figure A-14 Position-Dependent Configuration 

A.6 Control Functions 

The following Q22-bus signals provide control functions: 



Signal 



Definition 



BREP L Memory refresh (also block mode DMA) 

BHALT L Processor halt 

BINIT L Initialize 

BPOK H Power OK 

BDCOK H DC power OK 



A.6.1 Halt 

Assertion of BHALT L for at least 25 ns interrupts the processor, which stops program 
execution and forces the processor unconditionally into console I/O mode. 

A.6.2 Initialization 

Devices along the bus are initialized when BINIT L is asserted. The processor can assert 
BINIT L as a result of executing a reset instruction as part of a power-up or power-down 
sequence. BINIT L is asserted for approximately 10 ps when reset is executed. 

A.6.3 Power Status 

Power status protocol is controlled by two signals, BPOK H and BDCOK H. These signals 
are driven by an external device (usually the power supply). 

A.7 Q22-bus Electrical Characteristics 

Section A.7.1 lists the input and output logic levels for Q22-bus signals. 
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A.7.1 Signal Level Specifications 

The signal level specifications for the Q22-bus are as follows: 

Input Logic Level 

TTL logical low a o ttj / ~\ 

nvpT 1 • 1 u- u 0.8 Vdc (maximum) 

TTL logical high 2.0 Vdc (minimum) 

Output Logic Level 

TTL logical low a < ij-j /• • \ 

TVFT 1 • 1 1,- u 0-4 Vdc (maximum) 

TTL logical high o ^ irj / • • \ 

^ " 2.4 Vdc (minimum) 

A.7.2 Load Definition 

AC loads make up the maximum capacitance allowed per signal line to ground. A unit 
load is defined as 9.35 pF of capacitance. DC loads are defined as maximum current 
allowed with a signal line driver asserted or unasserted. A unit load is defined as 210 pA 
in the unasserted state. 

A.7.3 120-OhmQ22-bus 

The electrical conductors interconnecting the bus device slots are treated as transmission 
lines. A uniform transmission hne, terminated in its characteristic impedance, 
propagates an electrical signal without reflections. Since bus drivers, receivers, 
and wiring connected to the bus have finite resistance and nonzero reactance, the 
transmission line impedance is not uniform, and introduces distortions into pulses 
propagated along it. Passive components of the Q22-bus (such as wiring, cabling, and 
etched signal conductors) are designed to have a nominal characteristic impedance of 120 
ohms. 

The maximum length of interconnecting cable, excluding wiring within the backplane, is 
limited to 4.88 m (16 ft). 

A.7.4 Bus Drivers 

Devices driving the 120-ohm Q22-bus must have open collector outputs and meet the 
following specifications: 

DC Specifications 

• Output low voltage when sinking 70 mA of current is 0.7 V (maximum). 

• Output high leakage current when connected to 3.8 Vdc is 25 jiA (even if no power is 
applied, except for BDCOK H and BPOK H). 

• These conditions must be met at worst-case supply temperature, and input signal 
levels. 

AC Specifications 

• Bus driver output pin capacitance load should not exceed 10 pF. 

• Propagation delay should not exceed 35 ns. 

• Skew (difference in propagation time between slowest and fastest gate) should not 
exceed 25 ns. 

• Transition time (from 10% to 90% for positive transition — rise time, from 90% to 10% 
for negative transition — fall time) must be no faster than 10 ns. 
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A.7.5 Bus Receivers 

Devices that receive signals from the 120-ohm Q22-bus must meet the following 
requirements: 

DC Specifications 

• Input low voltage is 1.3 V (maximum). 

• Input high voltage is 1.7 V (minimum). 

• Maximum input current when connected to 3.8 Vdc is 80 pA (even if no power is 
applied). 

These specifications must be met at worst-case supply voltage, temperature, and output 
signal conditions. 

AC Specifications 

• Bus receiver input pin capacitance load should not exceed 10 pF. 

• Propagation delay should not exceed 35 ns. 

• Skew (difference in propagation time between slowest and fastest gate) should not 
exceed 25 ns. 

A.7.6 Bus Termination 

The 120-ohm Q22-bus must be terminated at each end by an appropriate terminator, 
as shown in Figure A-15. This is to be done as a voltage divider with its Thevenin 
equivalent equal to 120 ohms and 3.4 V (nominal). This type of termination is provided 
by an REVll-A refresh/boof terminator, BDVll-AA, KPVll-B, TEVll, or by certain 
backplanes and expansion cards. 
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Figure A-i 5 Bus Line Terminations 

Each of the several Q22-bus lines (all signals whose mnemonics start with the letter B) 
must see an equivalent network with the following characteristics at each end of the bus: 



Bus Termination Characteristic 



Value 



Input impedance 
(with respect to ground) 

Open circuit voltage 

Capacitance load 



120 ohms +5%, -15% 

3.4 Vdc +5% 

Not to exceed 30 pF 
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NOTE 

The resistive termination can be provided by the combinatiion of two modules. 
(The processor module supplies 220 ohms to ground. This, in parallel with 
another 220-ohm card, provides 120 ohms.) Both terminators must reside 
physically within the same backplane. 

A.7.7 Bus Interconnecting Wiring 

The following sections give specific information about bus interconnecting wiring. 

A.7.7.1 Backplane Wiring 

The wiring that connects all device interface slots on the Q22-bus must meet the 
following specifications: 

• The conductors must be arranged so that each line exhibits a characteristic 
impedance of 120 ohms (measured with respect to the bus common return). 

• Crosstalk between any two lines must be no greater than 5 percent. Note that worst- 
case crosstalk is manifested by simultaneously driving all but one signal line and 
measuring the effect on the undriven line. 

• DC resistance of the signal path, as measured between the near-end terminator 
and the far-end terminator module (including all intervening connectors, cables, 
backplane wiring, and connector-module etch) must not exceed 20 ohms. 

• DC resistance of the common return path, as measured between the near-end 
terminator and the far-end terminator module (including all intervening connectors, 
cables, backplane wiring and connector-module etch) must not exceed an equivalent 
of 2 ohms per signal path. Thus, the composite signal return path dc resistance must 
not exceed 2 ohms divided by 40 bus lines, or 50 milliohms. Note that although this 
common return path is nominally at ground potential, the conductance must be part 
of the bus wiring. The specified low impedance return path must be provided by the 
bus wiring as distinguished from the common system or power ground path. 

A.7.7 .2 Intrabackplane Bus Wiring 

The wiring that connects the bus connector slots within one contiguous backplane is 
part of the overall bus transmission line. Owing to implementation constraints, the 
nominal characteristic impedance of 120 ohms may not be achievable. Distributed wiring 
capacitance in excess of the amount required to achieve the nominal 120-ohm impedance 
may not exceed 60 pF per signal line per backplane. 

A.7.7.3 Power and Ground 

Each bus interface slot has connector pins assigned for the following dc voltages. The 
maximum allowable current per pin is 1.5 A. +5 Vdc must be rejjulated to 5 percent, 
with a maximum ripple of 100 mV pp. +12 Vdc must be regulated to 3 percent, with a 
maximum ripple of 200 mV pp. 

• +5 Vdc — three pins (4.5 A maximum per bus device slot) 
» -f-12 Vdc — two pins (3.0 A maximum per bus device slot) 

« Ground — eight pins (shared by power return and signal return) 

NOTE . ^ 

Power is not bused between backplanes on any interconnecting bus cables. 
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A.8 System Configurations 

Q22-bus systems can be divided into two types: 

• Systems containing one backplane 

• Systems containing multiple backplanes 

Before configuring any system, three characteristics for each module in the system must 
be identified. 

• Power consumption — +5 Vdc and +12 Vdc are the current requirements. 

• AC bus loading — The amount of capacitance a module presents to a bus signal line. 
AC loading is expressed in terms of ac loads, where one ac load equals 9.35 pF of 
capacitance. 

• DC bus loading — ^The amount of dc leakage current a module presents to a bus signal 
when the line is high (undriven). DC loading is expressed in terms of dc loads, where 
one dc load equals 210 pA (nominal). 

Power consumption, ac loading, and dc loading specifications for each module are included 
in the Microcomputer Interfaces Handbook. 

NOTE 

The ac and dc loads and the power consumption of the processor module, 
terminator module, and backplane must be included in detei'mining the total 
loading of a backplane. 

Rules for configuring single-backplane systems are as follows: 

• When using a processor with 220-ohm termination, the bus can accommodate modules 
that have up to 20 ac loads before additional termination is required (Figure A-16). 
If more than 20 ac loads are included, the other end of the bus must be terminated 
with 120 ohms. Then, up to 35 ac loads may be present. 

• With 120-ohm processor termination, up to 35 ac loads can be used without additional 
termination. If 120-ohm bus termination is added, up to 45 ac loads can be configured 
in the backplane. 

• The bus can accommodate modules up to 20 dc loads (total). 

• The bus signal lines on the backplane can be up to 35.6 cm (14 in.) long. 
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Figure A-16 Single-Backplane Configuration 
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Rules for configuring multiple backplane systems are as follows: 

• Figure A-17 shows that up to three backplanes can make up the system. 

• The signal lines on each backplane can be up to 25.4 cm (10 in.) long. 

• Each backplane can accommodate modules that have up to 22 ac loads. Unused 
ac loads from one backplane may not be added to another backplane if the second 
backplane loading exceeds 22 ac loads. It is desirable to load backplanes equally, or 
with the highest ac loads in the first and second backplanes. 

• DC loading of all modules in all backplanes cannot exceed 20 loads. 

• Both ends of the bus must be terminated with 120 ohms. This means the first 
and last backplanes must have an impedance of 120 ohms. To achieve this, each 
backplane can be lumped together as a single point. The resistive termination can be 
provided by a combination of two modules in the backplane - the processor providing 
220 ohms to ground in parallel with an expansion paddle card providing 250 ohms to 
give the needed 120-ohm termination. 

Alternately, a processor with 120-ohm termination would need no additional 
termination on the paddle card to attain 120 ohms in the first box. The 120-ohm 
termination in the last box can be provided in two ways: the termination resistors 
may reside either on the expansion paddle card, or on a bus termination card (such 
as the BDVll). 

• The cable(s) connecting the first two backplanes is 61 cm (2 ft) or more in length. 

• The cable(s) connecting the second backplane to the third backplane is 122 cm (4 ft) 
longer or shorter than the cable(s) connecting the first and second backplanes. 

• The combined length of both cables cannot exceed 4.88 m (16 ft). 

• The cables used must have a characteristic impedance of 120 ohms. 
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Figure A-17 Multiple Backplane Configuration 
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A.8.1 Power Supply Loading 

Total power requirements for each backplane can be determined by obtaining the 
total power requirements for each module in the backplane. Obtain separate totals 
for +5 V and +12 V power. Power requirements for each module are specified in the 
Microcomputer Interfaces Handbook. 

When distributing power in multiple backplane systems, do not attempt to distribute 
power through the Q22-bus cables. Provide separate, appropriate power wiring from 
each power supply to each backplane. Each power supply should be capable of asserting 
BPOK H and BDCOK H signals according to bus protocol; this is required if automatic 
power-fail/restart programs are implemented, or if specific peripherals require an orderly 
power-down halt sequence. The proper use of BPOK H and BDCOK H signals is strongly 
recommended. 

A.9 Module Contact Finger Identification 

Digital's plug-in modules all use the same contact finger (pin) identification system. A 
typical pin is shown in Figure A-18. 

BE2 



SLOT (ROW) IDENTIFIER 
■SLOT 8 



PIN IDENTIFIER 
■PlN E 



MODULE SIDE 
IDENTIFIER 
SIDE 2- (SOLDER 
SIDE) 



MR 165S3 
MA-1054.fi7 



Figure A-18 Typical Pin Identification System 

The Q22-bus is based on the use of quad-height modules that plug into a 2-slot bus 
connector. Each slot contains 36 lines (18 lines on both the component side and the 
solder side of the circuit board). 

Slots, row A, and row B include a numeric identifier for the side of the module. The 
component side is designated side 1, the solder side is designated side 2, as shown in 
Figure A-19. 
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Figure A-19 Quad-Height Moduie Contact Finger Identification 

Letters ranging from A through V (excluding G, I, O, and Q) identify a particular pin on 
a side of a slot. Table A-7 lists and identifies the bus pins of the quad-height module. A 
bus pin identifier ending with a 1 is found on the component side of the board, while a 
bus pin identifier ending with a 2 is found on the solder side of the board. 

The positioning notch between the two rows of pins mates with a protrusion on the 
connector block for correct module positioning. 

Figure A-20 represents the dimensions for a typical Q22-bus module. 
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BOTTOM Of FINGERS 
TO TOP OF HANDLE 

" (EXT LGTH) 
(STD LGTH) 




NOTES 

DIMENSIONS GIVEN IN INCHES 
DIMENSIONS DENOTED BY ' ARE FOB 
MAX USEABLE CIRCUIT AREA 
UNLESS OTHERWISE SPECIFIED ALL 
DIMENSIONS ABE ± 005 m 



056- 



L MAXIMUM HEIGHT OF 
SOLDERED COMPONENT 
TYP ■ I LEADS 

2 125 n-P 
O? EQUAL SPACES) 



063—1 



DOUBLE WIDTH 

' COMPONENT LIMIT 

U-C0NDUCT1VE- 834 

NONCONDUCTIVE - 875 

SINGLE WIDTH 
COMPONENT LIMIT 
■•-CONDUCTIVE - 343'" 
NONCONDUCTIVE - 375 <n 



MA-1091-B7 



Figure A-20 Typical Q22-bus Module Dimensions 



Table A-7 Bus Pin Identifiers 



Bus Pin 



Signal 



AAl 


BIRQ5 L 


ABl 


BIRQ6 L 


ACl 


BDAL16 L 


ADl 


BDAL17 L 


AEl 


SSPAREl 
(alternate +5 B) 



API 



SSPARE2 



Definition 



Interrupt request priority level 5. 

Interrupt request priority level 6. 

Extended address bit during addressing protocol; memory 
error data line during data transfer protocol. 

Extended address bit during addressing protocol; memory 
error logic enable during data transfer protocol. 

Special spare — Not assigned or bused in Digital's cable 
or backplane assemblies. Available for user connection. 
Optionally, this pin can be used for +5 V battery (+5 B) back- 
up power to keep critical circuits alive during power failures. 
A jumper is required on Q22-bus options to open (disconnect) 
the +5 B circuit in systems that use this line as 
SSPAREl. 

Special spare — Not assigned or bused in Digital's cable or 
backplane assemblies. Available for user interconnection. In 
the highest priority device slot, the processor can use this 
pin for a signal to indicate its run state. 



356 Q22-bus Specification 



Table A-7 (Com.) Bus Pin identifiers 



Bus Pin 



Signal 



AHl 


SSPARE3 
SRUN 


AJl 


GND 


AKl 


MSPAREA 


ALl 


MSPAREB 


AMI 


GND 


ANl 


BDMRL 



API 



BHALTL 



ARl 



BREFL 



Definition 



Special spare — Not assigned or bused simultaneously in 
Digital's cable or backplane assemblies;; available for user 
interconnection. An alternate SRUN signal can be connected 
in the highest priority set. 

Ground — System signal ground and dc return. 

Maintenance spare — Normally connected together on the 
backplane at each option location (not a bused connection). 

Maintenance spare — Normally connected together on the 
backplane at each option location (not a bused connection). 

Ground — System signal ground and dc return. 

DMA request — A device asserts this signal to request 
bus mastership. The processor arbitrates bus mastership 
between itself and all DMA devices on the bus. If the 
processor is not bus master (it has completed a bus cycle 
and BSYNC L is not being asserted by the processor), it 
grants bus mastership to the requesting device by asserting 
BDMGO L. The device responds by negating BDMR L and 
asserting BSACK L. 

Processor halt — When BHALT L is asserted for at least 25 
us, the processor services the halt interrupt and responds by 
halting normal program execution. External interrupts are 
ignored but memory refresh interrupts in Q22-bus operations 
are enabled if W4 on the M7264 and M7264-YA processor 
modules is removed and DMA request/i;rant sequences are 
enabled. The processor executes the ODT microcode, and the 
console device operation is invoked. 

Memory refresh — Asserted by a DMA device. This signal 
forces all dynamic MOS memory units requiring bus refresh 
signals to be activated for each BSYNC L/BDIN L bus 
transaction. It is also used as a control signal for block mode 
DMA. 



ASl 



+12 B or +5 B 



ATI 
AUl 

AVI 



GND 
PSPAREl 

-t-SB 



CAUTION 

The user must avoid multiple DMA data transfers 
(burst or hot mode) that could delay refresh operation 
if using DMA refresh. Complete refresh cycles must 
occur once every 1.6 ms if required. 

+12 Vdc or +5 V battery back-up power to keep critical 
circuits alive during power failures. This signal is not bused 
to BSl in all of Digital's backplanes. A jumper is required on 
all Q22-bus options to open (disconnect) the backup circuit 
from the bus in systems that use this Une at the alternate 
voltage. 

Ground — System signal ground and dc return. 

Spare — Not assigned. Customer usage not recommended. 
Prevents damage when modules are insisrted upside down. 

+5 V battery power — Secondary +5 V ipower connection. 
Battery power can be used with certain devices. 
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Table A-7 (Com.) Bus Pin Identifiers 



Bus Pin 



Signal 



Definition 



BAl 



BBl 



BCl 



BDl 



BEl 
BFl 
BHl 

BJl 

BKl 
BLl 

BMl 

BNl 



BPl 
BRl 



BSl 

BTl 
BUI 



BVl 
AA2 



BDCOK H 



BPOKH 



SSPARE4 
BDAL18 L 
(22-bit only) 

SSPARE5 
BDAL19 L 
(22-bit only) 



SSPARE6 
BDAL20 L 

SSPARE7 
BDAL21 L 

SSPARE8 



GND 

MSPABEB 
MSPAREB 

GND 

BSACK L 



BIRQ7 L 
BEVNTL 



+12 B 

GND 
PSPARE2 



+5 
+5 



DC power OK — A power supply generated signal that is 
asserted when the available dc voltage is sufficient to sustain 
reliable system operation. 

Power OK — Asserted by the power supply 70 ms after 
BDCOK is negated when ac power drops below the value 
required to sustain power (approximately 75% of nominal). 
When negated during processor operation, a power-fail trap 
sequence is initiated. 

Special spare in the Q22-bus — Not assigned. Bused in 
22-bit cable and backplane assemblies. Available for user 
interconnection. 



CAUTION 

These pins may be used by manufacturing as test 

points in some options. 

In the Q22-bus, these bused address lines are address lines 
<21:18>. Currently not used during data time. 

In the Q22-bus, these bused address lines are address lines 
<21:18>. Currently not used during data time. 

Special spare — Not assigned or bused in Digital's cable and 
backplane assemblies. Available for user interconnection. 

Ground — System signal ground and dc return. 

Maintenance spare — Normally connected together on the 
backplane at each option location (not a bused connection). 

Ground — System signal ground and dc return. 

This signal is asserted by a DMA device in response to the 
processor's BDMGO L signal, indicating that the DMA device 
is bus master. 

Interrupt request priority level 7. 

External event interrupt request — When asserted, the 
processor responds by entering a service routine through 
vector address 1008. A typical use of this signal is as a line 
time clock (LTC) interrupt. 

+12 Vdc battery back-up power (not bused to ASl in all of 
Digital's backplanes). 

Ground — System signal ground and dc return. 

Power spare 2 — Not assigned a function and not 
recommended for use. If a module is using 
-12 V (on pin AB2), and, if the module is accidentally 
inserted upside down in the backplane, -12 Vdc appears on 
pin BUI. 

+5 V power — Normal +5 Vdc system power. 

+5 V power — Normal +5 Vdc system power. 
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Table A-7 (Cont.) Bus Pin Identifiers 



Bus Pin 



Signal 



AB2 



-12 



AC2 


GND 


AD2 


+12 


AE2 


BDOUT L 



AF2 



AH2 



BRPLY L 



BDINL 



Definition 



-12 V power 12 Vdc power for (optional) devices 

requiring this voltage. Each Q22-bus module that requires 
negative voltages contains an inverter circuit that generates 
the required voltage(s). Therefore, -12 V power is not 
required with Digital's options. 

Ground — System signal ground and dc return. 

+12 V power — +12 Vdc system power. 

Data output — When asserted, BDOUT implies that valid 
data is available on BDAL<0:15> L and that an output 
transfer, with respect to the bus master device, is taking 
place. BDOUT L is deskewed with resiject to data on the 
bus. The slave device responding to the BDOUT L signal 
must assert BRPLY L to complete the transfer. 

Reply — BRPLY L is asserted in response to BDIN L or 
BDOUT L and during lAK transactions. It is generated by 
a slave device to indicate that it has placed its data on the 
BDAL bus or that it has accepted output data from the bus. 

Data input — BDIN L is used for two types of bus 
operations. 

• When asserted during BSYNC L time, BDIN L implies 
an input transfer with respect to the current bus master, 
and requires a response (BRPLY L). BDIN L is asserted 
when the master device is ready to accept data from the 
slave device. 

• When asserted without BSYNC L, it indicates that an 
interrupt operation is occurring. liTie master device 
must deskew input data from BRE'LY L. 



AJ2 



AK2 



BSYNC L 



BWTBT L 



AL2 



BIRQ4L 



Synchronize — BSYNC L is asserted by the bus master 

device to indicate that it has placed an address on 

BDAL<0:17> L. The transfer is in process until BSYNC 

L is negated. 

Write/byte — BWTBT L is used in two ways to control a bus 

cycle. 

• It is asserted at the leading edge of BSYNC L to indicate 
that an output sequence (DATO or DATOB), rather than 
an input sequence, is to follow. 

• It is asserted during BDOUT L, in a DATOB bus cycle, 
for byte addressing. 

Interrupt request priority level 4 — A level 4 device asserts 
this signal when its interrupt enable and interrupt request 
flip-flops are set. If the PS word bit 7 is 0, the processor 
responds by acknowledging the request by asserting BDIN L 
and BIAKO L. 



Q22-bus Specification 359 



Table A-7 (Cont.) Bus Pin Identifiers 



Bus Pin 



Signal 



Definition 



AM2 
AN2 



BIAKIL 
BIAKOL 



Interrupt acknowledge — In accordance with interrupt 
protocol, the processor asserts BIAKO L to acknowledge 
receipt of an interrupt. The bus transmits this to BIAKI L 
of the device electrically closest to the processor. This device 
accepts the interrupt acknowledge under two conditions. 

• The device requested the bus by asserting BIRQn L 
(where n= 4, 5, 6 or 7) 

• The device has the highest priority interrupt request on 
the bus at that time. 



AP2 



AR2 
AS2 



BBS7L 



BDMGI L 
BDMGO L 



AT2 



AU2 
AV2 



BINIT L 



BDALOL 
BDALIL 



BA2 


+5 


BB2 


-12 


BC2 


GND 


BD2 


+12 



If these conditions are not met, the device asserts BIAKO 
L to the next device on the bus. This process continues 
in a daisy chain fashion until the device with the highest 
interrupt priority receives the interrupt acknowledge signal. 

Bank 7 select — The bus master asserts this signal 
to reference the I/O page (including that part of the 
page reserved for nonexistent memory). The address in 
BDAL<0;12> L when BBS7 L is asserted is the address 
within the I/O page. 

Direct memory access grant — The bus arbitrator asserts 
this signal to grant bus mastership to a requesting device, 
according to bus mastership protocol. The signal is passed 
in a daisy-chain from the arbitrator (as BDMGO L) through 
the bus to BDMGI L of the next priority device (the device 
electrically closest on the bus). 

This device accepts the grant only if it requested to be 
the bus master (by a BDMR L). If not, the device passes the 
grant (asserts BDMGO L) to the next device on the bus. This 
process continues until the requesting device acknowledged 
the grant. 

CAUTION 

DMA device transfers must not interfere with the 

memory refresh cycle. 

Initialize — This signal is used for system reset. All 
devices on the bus are to return to a known, initial state; 
that is, registers are reset to zero, and logic is reset to 
state 0. Exceptions should be completely documented in 
programming and engineering specifications for the device. 

Data/address lines — These two lines are part of the 16-line 
data/address bus over which address and data information 
are communicated. Address information is first placed on the 
bus by the bus master device. The same device then either 
receives input data from, or outputs data to, the addressed 
slave device or memory over the same bus lines. 

+5 V power — Normal +5 Vdc system power. 

-12 V power (voltage not supplied) 12 Vdc power for 

(optional) devices requiring this voltage. 

Ground — System signal ground and dc return. 

+12 V power — +12 V system power. 
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Table A-7 (Cont.) Bus Pin identifiers 



Bus Pin 



Signal 



Definition 



BE2 


BDAL2L 


Data/address lines 


BF2 


BDAL3L 


data/address bus. 


BH2 


BDAL4L 




BJ2 


BDAL5L 




BK2 


BDAL6L 




BL2 


BDAL7L 




BM2 


BDAL8L 




BN2 


BDAL9L 




BP2 


BDALIO L 




BR2 


BDALll L 




BS2 


BDAL12 L 




BTK 


BDAL13 L 




BU2 


BDAL14 L 




BV2 


BDAL15 L 





These 14 lines are part of the 16-line 
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1.50 A maximum at +5.00 Vdc 
500 mA maximum at +12.0 Vdc 
62 mA maximum at -12.0 Vdc 

Fast diagnostic mode (FDM) is run only during power-up ROM diagnostics. 
Typical currents are 10 percent less than the specified maximum. 

B.3 Bus Loads 

The KA670 CPU bus loads are as follows: 
DC Loading 

The KA670-AA/BA module presents a value of less than 1 dc load to the Q22-bus. The 
actual maximum value is specified to be 0.57 dc loads. 
AC Loading 

The KA670-AA/BA presents a maximum of 4 ac loads to the Q22-bus. 

B.4 Battery Backup Specifications 

When dc power is supplied to the KA670 module, it charges the external batteries from 
+5 volts through a 240-ohm resistor. 

When dc power is removed from the KA670 module, it drains the external batteries at a 
rate of 1.0 milliamps/hour. 



NOTE 

These batteries supply power to the KA670 time-of-year clock and SSC RAM 

only. There is no battery backup for the memory system. 

B.5 Operating Conditions 

Itemwerature +5° to +60° C (^0° to +140° F), with a rate of change no greater 

than 20 ±2° C/hour (36 ±4° F/hour) at sea level. The maximum 
temperature must be derated by 1.8° C/1000 meters (1° F/1000 feet) 
above sea level. 

Humidity 10 to 95% noncondensing, with a maximum wet bulb temperature of 

32° C (90° F) and a minimum dew point temperature of 2° C (36° F). 

Altitude Up to 2,400 meters (8,000 feet), with a rate of change no greater than 

300 meters/minute (1000 feet/minute). 

^j-flow The airflow required to meet these specifications is 200 Ifm. 

B.6 Nonoperating Conditions (Less Than 60 Days) 

Ttemperature -40° to +66° C (-40° to +151° F), with a rate of change no greater 

than 11 ±2° C/hour (20 ±4° F/hour) at sea level. The maximum 
temperature must be derated by 1.8° C/1000 meters (1° P/1000 feet) 
above sea level . 

Humidity Up to 95% noncondensing. 

Altitude Up to 4,900 meters (16,000 feet), with a rate of change no greater 

than 600 meters/minute (2000 feet/minute). 
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B.7 Nonoperating Conditions (Greater than 60 Days) 

Ttemperature +5° to +60° C MO to +140° F), wth a rate of change no greater than 

20 ±2° C (36 ±4° F) per hour at sea level. The maximum temperature 
must be derated by 1.8° C/1000 meters (1° F/1000 feet) above sea 
level. 

Humidity 10 to 95% noncondensing, with a maximum wet bulb temperature of 

32° C (90° P) and a minimum dew point tempcsrature of 2° C (36° F). 

Altitude Up to 2,400 meters (8,000 feet), with a rate of change no greater than 

300 meters/minute (1000 feet/minute). 
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C.1 KA670 General Local Address Space Map 



Address Range 



VAX Memory Space 

0000 0000 to IPFF FFFF 



Contents 



Local memory space (512 Mbytes) 



VAX I/O Space 



2000 0000 
2000 2000 
2004 0000 
2008 0000 
2020 0000 
2400 0000 
2008 0000 
2C08 0000 
3000 0000 
3040 0000 
3400 0000 
3800 0000 
3C00 0000 



to 2000 IFFF 
to 2003 FFPF 
to 2007 FFFF 
to 201F FFFF 
to 23FF FFFF 
to 27FF FFFF 
to 2BFF FFFF 
to 2FFF FFFF 
to 303F FFFF 
to 33FF FFFF 
to 37FF FFFF 
to 3BFF FFFF 
to 3FFF FFFF 



Local Q22-bus I/O space (8 Kbytes) 
Reserved local I/O space (248 Kbytes) 
Local UVROM apace 
Local register I/O space (1.5 Mbytes) 
Reserved local I/O space (62.5 Mbytes) 
Reserved local I/O space (64 Mbytes) 
Reserved local I/O space (64 Mbytes) 
Reserved local I/O space (64 Mbytes) 
Local Q22-bus memory space (4 Mbytes) 
Reserved local I/O space (60 Mbytes) 
Reserved local I/O space (64 Mbytes) 
Reserved local I/O space (64 Mbytes) 
Reserved local I/O space (64 Mbytes) 
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C.2 KA670 Detailed Local Address Space Map 



Contents 



Local memory space (up to 512 Mbytes) 

Q22-bus map — top 32 Kbytes of main 
memory 



Address 



0000 0000 to IFFF FFFF 



VAX I/O Space 
Contents 



Address 



Local Q22-bu8 I/O Space 



Reserved Q22-bus I/O space 
Q22-bus floating address space 
User-reserved Q22-bus I/O space 
Reserved Q22-bus I/O space 
Interprocessor communication register 
Reserved Q22-bus I/O space 

Local Register I/O Space 

Reserved local register I/O space 

SHACl SSWCR 

Reserved local register I/O space 

SHACl SSHMA 

SHACl PQBBR 

SHACl PSR 

SHACl PESR 

SHACl PFAR 

SHACl PPR 

SHACl PMCSR 

Reserved local register I/O space 

SHACl PCQOCR 

SHACl PCQlCR 

SHACl PCQ2CR 

SHACl PCQ3CR 

SHACl PDFQCR 

SHACl PMFQCR 

SHACl PSRCR 

SHACl PECR 

SHACl PDCR 

SHACl PICR 

SHACl PMTCR 

SHACl PMTECR 

Reserved local register I/O space 

SHAC2 SSWCR 

Reserved local register I/O space 

SHAC2 SSHMA 

SHAC2 PQBBR 



2000 0000 to 2000 iFFF 



2000 0000 to 2000 0007 
2000 0008 to 2000 07FF 
2000 0800 to 2000 OFFF 
2000 1000 to 2000 1F3F 
2000 1F40 
2000 1F44 to 2000 IFFF 



2000 2000 to 2003 FFIPF 



2000 4000 to 2000 402F 

2000 4030 

2000 4034 to 2000 4043 

2000 4044 

2000 4048 

2000 404C 

2000 4050 

2000 4054 

2000 4058 

2000 405C 

2000 4060 to 2000 407F 

2000 4080 

2000 4084 

2000 4088 

2000 408C 

2000 4090 

2000 4094 

2000 4098 

2000 409C 

2000 40A0 

2000 40A4 

2000 40A8 

2000 40AC 

2000 40B0 to 2000 422F 

2000 4230 

2000 4234 to 2000 4243 

2000 4244 

2000 4248 



Address Assignments 369 



VAX I/O Space 
Contents 



Address 



Local Register I/O Space 



2000 2000 to 2003 FFFF 



SHAC2 PSR 

SHAC2 PESR 

SHAC2 PFAR 

SHAC2 PER 

SHAC2 PMCSR 

Reserved local register I/O space 

SHAC2 PCQOCR 

SHAC2 PCQICR 

SHAC2 PCQ2CR 

SHAC2 PCQ3CR 

SHAC2 PDFQCR 

SHAC2 PMFQCR 

SHAC2 PSRCR 

SHAC2 PECR 

SHAC2 PDCR 

SHAC2 PICR 

SHAC2 PMTCR 

SHAC2 PMTECR 

Reserved local register I/O space 

NICSRO— Vector add, IPL, sync/async 

NICSRl— Polling demand register 

NICSR2— Reserved 

NICSR3 — Receiver list address 

NICSR4— Transmitter list address 

NICSR5— Status register 

NICSR6 — Command and mode register 

NICSR7— System base address 

NICSR8— Reserved 

NICSR9— Watchdog timers 

NICSRIO— Reserved 

NICSRll— Revision number and missed frame 

count 

NICSR12— Reserved 

NICSR13— Breakpoint address 

NICSR14— Reserved 

NICSR15— Diagnostic mode and status 

Reserved local register I/O space 



UVROM Space 



MicroVAX system type register (in UVROM) 
Local UVROM (halt-protected) 



2000 424C 

2000 4250 

2000 4254 

2000 4258 

2000 425C 

2000 4260 to 2000 427F 

2000 4280 

2000 4284 

2000 4288 

2000 428C 

2000 4290 

2000 4294 

2000 4298 

2000 429C 

2000 42A0 

2000 42A4 

2000 42A8 

2000 42AC 

2000 42B0 to 2000 7FFF 

2000 8000 

2000 8004 

2000 8008 

2000 800C 

2000 8010 

2000 8014 

2000 8018 

2000 801C 

2000 8020* 

2000 8024* 

2000 8028* 

2000 802C* 

2000 8030* 
2000 8034* 
2000 8038* 
2000 803C 
2000 8040 to 2003 FFFP 



2004 0000 to 2007 FFFF 



2004 0004 

2004 0000 to 2007 FFFF 



•These registers are not fully implemented. Accesses yield unpredictable results. 
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VAX I/O Space 
Contents 



Address 



Local register I/O space 



2008 0000 to 201F FFPF 



DMA system configuration register 

DMA system error register 

DMA master error address register 

DMA slave error address register 

Q22-bus map base register 

Reserved local register I/O space 

Error status register (Reg. 32) 

Memory error address (Reg. 33) 

I/O Error address (Reg. 34) 

DMA memory error address (Reg. 35) 

DMA Mode control and diagnostic status register 
(Reg. 36) 

Reserved local register I/O space 

Boot and diagnostic register (32 copies) 

Reserved local register I/O space 

Q22-bus map registers 

Reserved local register I/O space 

SSC base address register 

SSC configuration register 

CP bus timeout control register 

Diagnostic LED register 

Reserved local register I/O space 

The following addresses allow those KA670 internal processor registers that are implemented in 
the SSC chip (external, internal processor registers) to be accessed using the local I/O page. These 
addresses are documented for diagnostic purposes only and should not be us(;d by nondiagnostic 

programs. 

Time-of-year register 

Console storage receiver status 

Console storage receiver data 

Console storage transmitter status 

Console storage transmitter data 

Console receiver control/status 

Console receiver data buffer 

Console transmitter control/status 

Console transmitter data buffer 

Reserved local register I/O space 

I/O bus reset register 

Reserved local register I/O space 

Rom data register 

Bus timeout counter 

Interval timer 

Reserved local register I/O space 



2008 0000 

2008 0004 

2008 0008 

2008 OOOC 

2008 0010 

2008 0014 to 2008 OOFF 

2008 0180 

2008 0184 

2008 0188 

2008 018C 

2008 0190 

2008 0194 to 2008 3PFF 
2008 4000 to 2008 407C 
2008 4080 to 2008 7FFP 

2008 8000 to 2008 FFFF 

2009 0000 to 2013 FFFF 
2014 0000 

2014 0010 
2014 0020 
2014 0030 
2014 0034 to 2014 006B 



2014 006C 

2014 0070* 

2014 0074* 

2014 0078* 

2014 007C* 

2014 0080 

2014 0084 

2014 0088 

2014 008C 

2014 0090 to 2014 OODB 

2014 OODC 

2014 OOEO 

2014 OOFOt 

2014 00P4t 

2014 00F8t 

2014 OOFC to 2014 OOFF 



•These registers are not fiilly implemented. Accesses yield unpredictable results. 

tThese registers are internal SSC registers used for SSC chip test purposes only. They should not be accessed 
by the CPU. 
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VAX I/O Space 
Contents 



Address 



Ix>cal register I/O space 



Timer control register 
Timer interval register 
Timer next interval register 
Timer interrupt vector 
'Rmer 1 control register 
Timer 1 interval register 
Timer 1 next interval register 
Timer 1 interrupt vector 
Reserved local register I/O space 
BDR address decode match register 
BDR address decode mask register 
Reserved local register I/O space 
Battery backed-up RAM 
Reserved local register I/O space 

Reserved local I/O space 

Local Q22-bus memory space 

Reserved Local register I/O space 



2014 0100 

2014 0104 

2014 0108 

2014 OlOC 

2014 0110 

2014 0114 

2014 0118 

2014 one 

2014 0120 to 2014 012F 

2014 0130 

2014 0134 

2014 0138 

2014 0400 

2014 0800 

2020 0000 

3000 0000 



3040 0000 



to 2014 03FF 
to 2014 07FF 
to 201F FFFF 

to 2FFF FFFF 

to 303F FFFF 

to 3FFF FFFF 



C.3 External, Internal Processor Registers 

Several of the internal processor registers (IPRs) on the KA670 are implemented in the 
C chip or SSC chip rather than the CPU chip. These registers are referred to as external, 
internal processor registers and are listed here. 



IPR Register Name 



27 Time-of-year register 

28 Console storage receiver status 

29 Console storage receiver data 

30 Console storage transmitter status 

31 Console storage transmitter data 

32 Console receiver control/status 

33 Console receiver data buffer 

34 Console transmitter control/status 

35 Console transmitter data buffer 

55 I/O system reset register 

112 Backup cache reserved register 

113 Backup cache tag store 

114 Backup cache PI tag store 

115 Backup cache P2 tag store 

116 Backup cache refr-esh register 



Abbreviation 



TOY 

CSRS* 
CSRD* 
CSTS* 
CSDB* 

RXCS 
RXDB 
TXCS 
TXDB 

lORESET 

BC112* 

BCBTS 

BCPITS 

BCP2TS 

BCRFR 
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IPR Register Name 



Abbreviation 



117 Backup cache index register 

118 Backup cache status register 

119 Backup cache control register 

120 Backup cache error register 

121 Backup cache flush backup cache tag store 

122 Backup cache flush primary cache tag store 

123 Backup cache reserved register 



BCIDX 

BCSTS; 

BCCTL 

BCERR 

BCFBTC 

BCPB1?S 

BC123* 



C.4 Global Q22-bus Address Space Map 



Q22-bu8 Memory Space 

Q22-bus memory space (octal) 
Q22-bu8 I/O Space (BBS7 Asserted) 

Q22-bus I/O Space (octal) 
Reserved Q22-bus I/O space 
Q22-bus floating address space 
User-reserved Q22-bus I/O space 
Reserved Q22-bus I/O space 
Interprocessor communication register 
Reserved Q22-bus I/O space 



0000 0000 to 1777 7777 



1776 0000 to 
1776 0000 to 
1776 0010 to 

1776 4000 to 

1777 0000 to 
1777 7500 
1777 7502 to 



1777 7777 
1776 0007 
1776 3777 

1776 7777 

1777 7477 

1777 7777 



D 
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The information in this appendix is for reference only. 

D.1 Syntax 

The standard notation for operand specifiers is 

<NAME> . <access typexdata typ&> 

Name 

is a suggestive name for the operand in the context of the instruction. It is the capitalized 
name of a register or block for implied operands. 



Access type 

is a letter denoting the operand specifier access type. 


a = 


address operand. 


b 


branch displacement. 


m 


modified operand (both read and written). 


r 


read only operand. 


V = 


if not Rn, same as a, otherwise Rln+imtnl. 


w = 


write-only operand. 


Data type 

is a letter denoting the data type of the operand. 


b 


byte. 


d 


d_floating. 


f 


f_floating. 


g 


g_floating. 


1 


longword. 


q 


quadword. 


V = 


field (used only in implied operands). 


w = 


word. 


* - 


multiple longwords (used only in implied operands). 



Implied operands 

are locations accessed by the instruction, but not specified in an operand. They appear in 
curly braces (). 
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Abbreviations for Condition Codes 

* = conditionally set/cleared. 
= not affected. 

= cleared. 

1 = set. 

Abbreviations for Exceptions 

rsv = reserved operand fault, 

iov = integer overflow trap, 

idvz = integer divide by zero trap, 

fov = floating overflow fault, 

fuv = floating underflow fault, 

fdvz = floating divide by zero fault, 

dov = decimal overflow trap, 

ddvz = decimal divide by zero trap, 

sub = subscript range trap, 

prv = privileged instruction fault. 

Table D~l Integer Arithmetic and Logical Instructions 

Opcode Instruction NZVC Exceptions 

58 ADAWI add.rw, sum.mw * * * * 



80 ADDB2 add.rb, sum.mb * ♦ « * 

CO ADDL2 add.rl, sum.ml * * * * 

AG ADDW2 add.rw, sum.mw 



* * * * 



81 ADDB3 addl.rb, add2.rb, sum.wb * * * * 

CI ADDL3 addl.rl, add2.rl, sum.wl 



* « « « 



lOV 

iov 

iov 
iov 

iov 
iov 



Al ADDW3 addl.rw, add2.rw, sum.ww * • * * jq^ 

D8 ADWC add.rl. sum.ml • * * * ^^^ 



78 ASHL cnt.rb, src.rl, dst.wl * • • 

79 ASHQ cnt.rb, src.rq, dst.wq * * * 

8A BICB2 mask.rb, dst.mb * * - 

CA BICL2 mask.rl, dst.ml * * - 

AA BICW2 mask.rw, dst.mw * * - 

8B BICB3 mask.rb, src.rb, dst.wb * • - 

CB BICL3 mask.rl, src.rl, dst.wl • * - 

AB BICW3 mask.rw, src.rw, dst.ww * * - 

88 BISB2 mask.rb, dst.mb * • - 

C8 BISL2 mask.rl, dst.ml * • Q . 

A8 BISW2 mask.rw, dst.mw * * - 



iov 
iov 
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Table D-1 (Cont.) integer Arithmetic and Logical Instructions 

Opcode Instruction NZVC Exceptions 

89 BISB3 mask.rb, src.rb, dst.wb * * - 

C9 BISL3 mask.rl, src.rl, dst.wl * * - 

A9 BISW3 mask.rw, src.rw, dst.ww * * - 

93 BITB mask.rb, src.rb * * - 
D3 BITL mask.rl, src.rl * * - 
B3 BITW mask.rw, src.rw * * - 

94 CLRB dst.wb 10- 
D4 CLRL{=F} dst.wl 10- 

7C CLRQ{=D=G} dst.wq 10- 

B4 CLRW dst.ww 10- 

91 CMPB srcl.rb, src2.rb * * * 

Dl CMPL srcl.rl, src2.rl * * * 

Bl CMPW srcl.rw, src2.rw * * ♦ 

98 CVTBL src.rb, dst.wl * * 

99 CVTBW src.rb, dst.wl * * 

F6 CVTLB src.rl, dst.wb ***0 iov 

F7 CVTLW src.rl, dst.ww * * * iov 

33 CVTWB src.rw, dst.wb * * * iov 

32 CVTWL src.rw, dst.wl * * 

97 DECB dif.mb * * • * iov 

D7 DECLdif.ml **** iov 

B7 DECW dif.mw * * * * iov 

86 DIVB2 divr.rb, quo.mb * ♦ * iov,idvz 
C6 DIVL2 divr.rl, quo.ml * * * iov,idvz 
A6 DIVW2 divr.rw, quo.mw * * * iov,idv2 

87 DIVB3 divr.rb, divd.rb, quo.wb * * * iov.idvz 
C7 DIVL3 divr.rl, divd.rl, quo.wl ♦ * ♦ o iov,idvz 
A7 DIVW3 divr.rw, divd.rw, quo.ww * * * iov,idvz 

7B EDIV divr.rl, divd.rq, quo.wl, rem.wl * * * iov.idvz 

7A EMUL mulr.rl, muld.rl, add.rl, prod.wq * * 



96 


INCB sum.mb 


D6 


INCL sum .ml 


B6 


INCW sum.mw 


92 


MCOMB src.rb, dst.wb 


D2 


MCOML srcrl, dst.wl 


B2 


MCOMW src.rw, dst.ww 



« * * * 



**0- 
* *0 - 
**0- 



lOV 



* ♦ * * iov 

* * * * iov 
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Table D-1 (Com.) integer Arithmetic and Logical Instructions 

Opcode Instruction N Z V C Exceptions 

8E MNEGB src.rb, dst.wb * ♦ * * jqv 

CE MNEGL src.rl, dst.wl * * * * lev 

AE MNEGW src.rw, dst.ww * * * • j^v 

90 MOVE src.rb, dst.wb * * - 

DO MOVL src.rl, dst.wl * * - 

7D MOVQ src.rq, dst.wq * * . 

BO MOVW src.rw, dst.ww * * - 

9A MOVZBW src.rb, dst.wb 0*0- 

9B MOVZBL src.rb, dst.wl 0*0- 

3C MOVZWL src.rw, dst.ww 0*0- 

84 MULB2 mulr.rb, prod.mb * * • iov 
C4 MULL2 mulr.rl, prod.ml ♦ * * iov 
A4 MULW2 mulr.rw, prod.mw * * * iov 

85 MULB3 mulr.rb, muld.rb, prod.wb ♦ * * q iov 
C5 MULL3 mulr.rl, muld.rl, prod.wl * * * iov 
A5 MULW3 mulr.rw, muld.rw, prod.ww * * * iov 

DD PUSHL src.rl, {-(SP).wl) * * - 

9C ROTL cnt.rb, src.rl, dst.wl * * - 

D9 SBWC sub.rl, difml * * * * iov 

82 SUBB2 sub.rb, dif.mb * * * • joy 
C2 SUBL2 bub.rl, dif.ml * * • * jqv 
A2 SUBW2 sub.rw, dif.mw « • ♦ * jqv 

83 SUBB3 sub.rb, min.rb, dif.wb • ♦ ♦ * joy 
C3 SUBL3 sub.rl, min.rl, dif.wl • * * * joy 
A3 SUBW3 sub.rw, min.rw, dif.ww * ♦ * * jqv 

95 TSTB src.rb • * 

D5 TSTL src.rl * * 

B5 TSTW src.rw * * 

8C X0RB2 mask.rb, dst.mb * * - 

CC X0RL2 mask.rl, dst.ml * * - 

AC X0RW2 mask.rw, dst.mw ♦ * - 

8D XORB3 mask.rb, src.rb, dst.wb • * - 

CD X0RL3 mask.rl, src.rl, dst.wl * * - 

AD XORW3 mask.rw, src.rw, dst.ww * * - 
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Table D-2 Address instructions 



Opcode 


Instruction 


NZVC 


Exceptions 


9E 


MOVAB srcab, dst.wl 


**o- 




DE 


MOVAL(=F} src.al, dst.wl 


**o- 




7E 


MOVAQ{=D=G) srcaq, dst.wl 


**0- 




3E 


MOVAW src.aw, dst.wl 


**o- 




9F 


PUSHAB srcab, {-(SP).w]) 


**o- 




DF 


PUSHAL{=F} srcal, {-(SP).wl) 


**0- 




7F 


PUSHAQ{=D=G} srcaq, {-(SP).wl) 


•♦0- 




3F 


PUSHAW src.aw, (-(SP).wl) 


**0- 




Table D-3 


Variable Length Bit Field Instructions 






Opcode 


Instruction 


NZVC 


Exceptions 


EC 


CMPV pos.rl, size.rb, base.vb, (field.rv), src.rl 


* *o* 


rsv 


ED 


CMPZV pos.rl, size.rb, base.vb, {field.rv}, src.rl 


* *o* 


rsv 


EE 


EXTV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 


**o- 


rsv 


EF 


EXTZV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 


**0- 


rsv 


FO 


INSV src.rl, pos.rl, size.rb, base.vb, {field. wv} 


. - . . 


rsv 


EB 


FFC startpos.rl, size.rb, base.vb, {field.rv}, 
findpos.wl 


0*00 


rsv 


EA 


FFS startpos.rl, size.rb, base.vb, (field.rv}, 
findpos.wl 


0*00 


rsv 


Table D-4 


Control Instructions 






Opcode 


Instruction 


NZVC 


Exceptions 


9D 


ACBB limit.rb, add.rb, index.mb, displ.bw 


* * * . 


iov 


Fl 


ACBL limit.rl, add.rl, index.ml, displ.bw 


* * * . 


lev 


3D 


ACBW limit.rw, add.rw, index.mw, displ.bw 


* * * . 


iov 


F3 


AOBLEQ limit.rl, index.ml, displ.bb 


* * * . 


iov 


F2 


AOBLSS limit.rl, index.ml, displ.bb 


* * * . 


iov 


IE 


BCC{=BGEQU) dispLbb 







IF 


BCS{=BLSSU) displ.bb 


.... 




13 


BEQL{=BEQLU} displ.bb 


.... 




18 


BGEQ dispLbb 







14 


BGTR dispLbb 







lA 


BGTRU dispLbb 


.... 




15 


BLEQ dispLbb 







IB 


BLEQU dispLbb 







19 


BLSS dispLbb 







12 


BNEQ(=BNEQU} displ.bb 


.... 




IC 


BVC dispLbb 


.... 




ID 


BVS displ.bb 








El 



BBC pos.rl, base.vb, displ.bb, {field.rv} 



rsv 
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Table D-4 (Com.) Control Instructions 



Opcode Instruction 



NZVC 



Exceptions 



EO BBS pos.rl, base.vb, displ.bb, (field.rv) 

E5 BBCC pos.rl, base.vb, displ.bb, {field.mv) 

E3 BBCS pos.rl, base.vb, displ.bb, {field.mv) 

E4 BBSC pos.rl, base.vb, displ.bb, {field.mv) 

E2 BBSS pos.rl, base.vb, displ.bb, {field.mv} 

E7 BBCCI pos.rl, base.vb, displ.bb, {field.mv) 

E6 BBSSI pos.rl, base.vb, displ.bb, {field.mv} 

E9 BLBC src.rl, displ.bb 

E8 BLBS srcrl, displ.bb 

11 BRB dispLbb 

31 BRW displ.bw 

10 BSBB displ.bb, {-(SP).wl} 

30 BSBW displ.bw, {■<SP).wl} 

8F CASEB selector.rb, base.rb, limit.rb, displ.bw-list 

CP CASEL selector.rl, base.rl, limit.rl, displ.bw-list 

AF CASEW selector.rw, base.rw, limit.rw, displ.bw-list 

17 JMP dst.ab 

16 JSB dst.ab, {-(SP).wl) 

05 RSB {(SP)+.rl} 

F4 SOBGEQ index.ml, displ.bb 

F5 SOBGTR index.ml, displ.bb 



♦ *0* 

» « Q * 

* *o* 



rsv 

rsv 
rsv 

rsv 
rsv 

rsv 
rsv 



lOV 



lOV 



Table D-5 Procedure Call Instructions 



Opcode Instruction 



NZVC 



Exceptions 



FA CALLG arglist.ab, dst.ab, {-(SP).w*) 

PB CALLS numarg.rl, dst.ab, {-(SP).w*) 

04 RET {(SP)+.r*} 



0000 
0000 



rsv 
rsv 
rsv 



Table D-€ Miscellaneous Instructions 



Opcode Instruction 



NZVC 



Exceptions 



B9 



BICPSW mask.rw 



rsv 
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Table D-6 (Com.) Miscellaneous Instructions 



Opcode Instruction 



B8 BISPSW mask.rw 

03 BPT {-(KSP).w*} 

00 HALT {-(KSP).w*} 

OA INDEX subscript-rl, low.rl, high.rl, size.rl, 
indexin.rl, sub indexout.wl 

DC MOVPSL dst.wl 

01 NOP 

BA POPR mask.rw, {(SP)+.r*} 

BB PUSHR mask.rw, {-(SP).w*) 

FC XFC (unspecified operands} 



0000 



00 



N Z V C Exceptions 



rsv 



prv 



0000 



Table D-7 Queue Instructions 



Opcode Instruction 



NZVC 



Exceptions 



5C INSQHI entry.ab, header.aq 

5D INSQTI entry.ab, header.aq 

OE INSQUE entry.ab, pred.ab 

5E REMQHI header.aq, addr.wl 

5F REMQTI header.aq, addr.wl 

OF REMQUE entry.ab, addr.wl 



0*0* 
0*0* 
**0* 
0*»* 
** * 



rsv 



rsv 



rsv 



rsv 



Table i>-8 Operating System Support Instructions 



Opcode Instruction 



NZVC 



Exceptions 



BD CHME param.rw, {-(ySP).w*) 
BC CHMK param.rw, {-<ySP).w*} 
BE CHMS param.rw, {-(ySP).w*) 
BF CHMU param.rw, {-(ySP).w*) 

Where y=MINU(x, PSL<current.mode>) 
06 LDPCTX {PCB.r*, -(KSP).w*) 



0000 
0000 
0000 
0000 



rsv, prv 
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Table D-8 (Cont.) Operating System Support Instructions 



opcode Instruction 



NZVC 



DB MFPR procreg.rl, dst.wl 

DA MTPR srcrl, procreg.rl 

OC PROBER mode.rb, len.rw, base.ab 

OD PROBEW mode.rb, len.rw, base.ab 

02 REI {(SP)+.r*) 

07 SVPCTX {(SP)+.r*, PCB.w*} 



* * - 

• * - 

0*0- 
0*0- 



Table D-9 Floating Point Instructions 



Exceptions 



rsv, prv 
rsv, prv 



rsv 



prv 



Opcode Instruction 



NZVC 



61 ADDD3 addl.rd, add2.rd, sum.wd 

41 ADDF3 addl.rf, add2.rf, sum.wf 

41FD ADDG3 addl.rg, add2.rg, sum.wg 

71 CMPD srcLrd, src2.rd 

51 CMPF srcl.rf, src2.rf 

51FD CMPG srcl.rg, src2.rg 

6C CVTBD src.rb, dst.wd 

4C CVTBF src.rb, dst.wf 

4CFD CVTBG src.rb, dst.wg 

68 CVTDB src.rd, dst.wb 
76 CVTDF src.rd, dst.wf 
6A CVTDL src.rd, dst.wl 

69 CVTDW src.rd, dst.ww 

48 CVTFB src.rf, dst.wb 
56 CVTFD src.rf, dst.wd 
99FD CVTFG src.rf, dst.wg 
4A CVTFL src.rf, dst.wl 

49 CVTFW src.rf, dst.ww 
48FD CVTGB src.rg, dst.wb 
33FD CVTGF src.rg, dst.wf 
4AFD CVTGL src.rg, dst.wl 
49FD CVTGW src.rg, dst.ww 
6E CVTLD srcrl, dst.wd 
4E CVTLF srcrl, dst.wf 
4EFD CVTLG srcrl, dst.wg 
6D CVTWD src.rw, dst.wd 



**00 
**00 
**00 

•*00 

* *00 
♦*00 

* *00 

* ♦00 
•*00 
***0 
**00 
***0 

* * « Q 
***0 

**00 
**00 

* •*o 

* **o 

* **o 

**00 

* **0 

* * •o 

♦*00 
**00 
**00 
•♦00 



Exceptions 



These instructions are implemented by the KA670 floating point accelerator. 
60 ADDD2 add.rd, sum.md ♦ ♦ 

40 ADDF2 add.rf, sum.mf * * 

40FD ADDG2 add.rg, sum.mg ♦ ♦ 



rsv.fov.fuv 
rsv.fov.fuv 
rsv,fov,fuv 

rsv,fov,fuv 
rsv,fov,fuv 
rsv.fovjfuv 

rsv 
rsv 
rsv 



rsv, lov 
rsv, fov 
rsv, iov 
rsv, iov 
rsv, iov 
rsv 
rsv 

rsv, iov 
rsv, iov 
rsv, iov 
rsv.fov.fuv 
rsv, iov 
rsv, iov 



Table D-9 (Cont.) Floating Point instructions 
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Opcode Instruction 



NZVC 



Exceptions 



4D CVTWP src.rw, dst.wf 

4DFD CVTWG src.rw, dst.wg 

6B CVTRDL src.rd, dst.wl 

4B CVTRFL src.rf, dst.wl 

4BFD CVTRGL src.rg, dst.wl 

66 DIVD2 divr.rd, quo.md 

46 DIVF2 divr.rf, quo.mf 
46FD DIVG2 divr.rg, quo.mg 

67 DIVD3 divT.rd, divd.rd, quo.wd 

47 DIVF3 divr.rf, divd.rf, quo.wf 
47FD DIVG3 divr.rg, divd.rg, quo.wg 

72 MNEGD src.rd, dst.wd 

52 MNEGF src.rf, dst.wf 
52FD MNEGG src.rg, dst.wg 

70 MOVD src.rd, dst.wd 

50 MOVF src.rf, dst.wf 

50FD MOVG src.rg, dst.wg 

64 MULD2 mulr.rd, prod.md 

44 MULF2 mulr.rf, prod.mf 
44FD MULG2 mulr.rg, prod.mg 

65 MULD3 mulr.rd, muld.rd, prod.wd 

45 MULF3 mulr.rf, muld.rf, prod.wf 
45FD MULG3 mulr.rg, muld.rg, prod.wg 

62 SUBD2 sub.rd, dif md 

42 SUBF2 sub.rf, dif.mf 
42FD SUBG2 sub.rg, dif.mg 

63 SUBD3 sub.rd, min.rd, dif.wd 

43 SUBF3 sub.rf, min.rf, dif.wf 
43FD SUBG3 sub.rg, min.rg, dif.wg 

73 TSTD srcrd 

53 TSTF src.rf 
53FD TSTG src.rg 



* *0() 




**00 




* * + 


rsv, iov 


* * * 


rsv, iov 


* * *o 


rsv, iov 


**00 


rsv,fov,fuv, fdvz 


* *00 


rsv,fov,fuv, fdvz 


**00 


rsv.fov.fuv, fdvz 


* * 00 


rsv,fov,fuv, fdvz 


**00 


rsv.fov.fuv, fdvz 


**00 


rsv,fov,fuv, fdvz 


• *00 


rsv 


* *00 


rsv 


**00 


rsv 


♦*0- 


rsv 


**0- 


rsv 


**0- 


rsv 


* *00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


* *00 


rsv,fov,fuv 


♦ •00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


* *00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


**00 


rsv,fov,fuv 


**00 


rsv.fov.fuv 


**00 


rsv 


**00 


rsv 


**00 


rsv 
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Table D-10 Microcode- Assisted Emulated instructions 



Opcode Instruction N Z V C Exceptions 

The KA670 CPU provides microcode assistance for the macrocode emulation of these instructions. 
The CPU processes the operand specifiers, creates a standard argument list, and invokes an 
emulation routine to perform emulation. 

20 ADDP4 addlen.rw, addaddr.ab, sumlen.rw, * * * rsv, dov 
sumaddr.ab 

21 ADDP6 addllen.rw, addladdr.ab, Add21en.rw, * * * rsv, dov 
add2addr.ab, sumlen.rw, sumaddr.ab 

F8 ASHP cnt.rb, srclen.rw, srcaddr.ab, round.rb, * * * rsv, dov 

dstlen.rw, dstaddr.ab 

35 CMPP3 len.rw, srcladdr.ab, 8rc2addr.ab * * 

37 CMPP4 srcllen.rw, srcladdr.ab, src21en.rw, ••00 

8rc2addr.ab 

OB CRC tbl.ab, inicrc.rl, strlen.rw, stream.ab * * 

F9 CVTLP src.rl, dstlen.rw, dstaddr.ab • ♦ • 

36 CVTPL srclen.rw, srcaddr.ab, dst.wl * • • 

08 CVTPS srclen.rw, srcaddr.ab, dstlen.rw, dstaddrab * * • 

09 CVTSP srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab * * • 

24 CVTPT srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, * * • 

dstaddr.ab 

26 CVTTP srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, • • * 
dstaddr.ab 

27 DIVP divrlen.rw, divraddr.ab, divdlen.rw, • * * 
divdaddr.ab, quolen.rw, quoaddr.ab 

38 EDITPC srclen.rw, srcaddr.ab, Pattern .ab, * • • * 
dstaddr.ab 

39 MATCHC objlen.rw, objaddr.ab, srclen.rw, 0*00 
srcaddr.ab 

34 MOVP len.rw, srcaddr.ab, dstaddr.ab • * 

2E MOVTC srclen.rw, srcaddr.ab, fill.rb, tbladdr.ab, • • • 

dstlen.rw, dstaddr.ab 



2F MOVTUC srclen.rw, srcaddr.ab, esc.rb, tbladdr.ab, 

dstlen.rw, dstaddr.ab 



* * « « 



rsv. 


dov 


rsv, 


iov 


rsv, 


dov 


rsv. 


dov 


rsv. 


dov 


rsv. 


dov 


rsv, 


dov,ddvz 


rsv, 


, dov 



25 MULP mulrlen.rw, mulraddr.ab, muldlen.rw, * • * rsv, dov 

muldaddr.ab, prodlen.rw, prodaddr.ab 
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Table D-10 (Cont.) Microcode-Assisted Emulated Instructions 



Opcode Instruction N Z V C Exceptions 

22 SUBP4 sublen.rw, sabaddr.ab, diflen.rw, difaddr.ab * * • rsv, dov 

23 SUBP6 sublen.rw, subaddr.ab, minlen.rw, * * ♦ rsv, dov 
minaddr-ab, diflen.rw, difaddr.ab 



Machine State on Power-Up 



This appendix describes the state of the KA670 after a power-up halt. 
The descriptions in this appendix assume 

• The machine has no errors. 

• The machine has just been turned on. 

• Only the power-up diagnostics have been run. 

The state of the machine is undefined after individual diagnostics are run, or during any 
other halts other than a power-up halt (SAVPSL<13:8>(RESTART_CODE) = 3). 

The following sections describe data structures that are guaranteed to be constant over 
future versions of the KA670 firmware. The placement and/or existence of any other 
structure(s) is not implied. 

E.1 Main Memory Layout and State 

Main memory is tested and initialized by the firmware on power-up. Fi|nire EI-1 shows 
how main memory is partioned after diagnostics. 



PFN Bitmap 



QMR base 



Available System Memory 
(Pages Potentially Good or Bad) 



PFN Bitmap 
(4,8,12.16,20.24,28, or 32 Pages 
on Next 32 Kbyte Boundary Below QMFts) 



Firmware Scratch Memory 

(Balance of Pages Between 

PFN Bitmap and QMRs) 



Q22-BUS Scatter/Gather Map 
(64 Pages Always on 32 Kbyte boundary) 



First Good 

64 Kbyte Block 
From the Top 



Top of Memory 



Potential Bad Memory 



Figure E-1 Memory Layout After Power-Up Diagnostics 
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E.1.1 Reserved Main Memory 

In order to build the scatter/gather map and the bitmap, the firmware tries to find a 
physically contiguous, page-aligned, 176-kilobyte block of memory at the highest possible 
address that has no multiple-bit errors. Single-bit errors are tolerated in this section. 

Of the 176 kilobytes, the upper 32 kilobytes is dedicated to the Q22-bus scatter/gather 
map, as shown in Figure E-1. Of the lower portion, up to 128 kilobytes at the bottom 
of the block is allocated to the page frame number (PFN) bitmap. The size of the PFN 
bitmap depends on the extent of physical memory. Each bit in the bitmap maps one page 
(512 bytes) of memory. The remainder of the block between the bitmap and scatter/gather 
map (16 kilobytes minimum) is allocated for the firmware. 

E.I .1.1 Page Frame Number (PFN) Bitmap 

The page frame number bitmap is a data structure that indicates which pages in memory 
are deemed usable by operating systems. The bitmap is built by the diagnostics as a side 
effect of the memory tests on power-up. The bitmap always starts on a page boundary. 
The bitmap requires 1 kilobyte for every 4 megabytes of main memory: 



System Size Main Memory Required for the Bitmap 

8 Mbytes 2 Kbytes 

16 Mbytes 4 Kbytes 

32 Mbytes 6 Kbytes 

64 Mbytes 8 Kbytes 



The bitmap does not map itself or anything above it. There may be memory above the 
bitmap that has both good and bad pages 

Each bit in the PFN bitmap corresponds to a page in main memory. There is a one-to-one 
correspondance between a page frame number (origin 0) and a bit index in the bitmap. A 
1 in the bitmap indicates that the page is good and can be used. A indicates that the 
page is bad and should not be used. By default, a page is flagged as bad if a multiple-bit 
error occurs when referencing the page. Single-bit errors, regardless of frequency, will 
not cause a page to be flagged as bad. 

The PFN bitmap is protected by a checksum stored in the battery backed-up RAM (BBU 
RAM). The checksum is a simple byte-wide, two's complement checksum. The sum of all 
bytes in the bitmap and the bitmap checksum should result in zero. Operating systems 
that modify the bitmap are encouraged to update this checksum to faciliate diagnosis by 
service personnel. 

E.I .1.2 Scatter/Gather Map 

On power-up, the scatter/gather map is initialized by the firmware to map to the 
first 4 megabytes of main memory. Main memory pages are not mapped if there is a 
corresponding page in Q22-bus memory, or if the pages are marked bad by the PFN 
bitmap. 

On a processor halt other than power-up, the contents of the scatter/gather map is 
undefined and depends on operating system usage. 

Operating systems should not move the location of the scatter/gather map. They should 
access the map only on aligned longwords through the local I/O space of 20088000 to 
2008FFFC, inclusive. The Q22-bus map base register, (QMBR) is set up by the firmware 
to point to this area, and should not be changed by software. 
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E.I. 1.3 Firmware Scratch Memory 

Scratch memory is reserved for the firmware. However, scratch memory is used only 
after successful execution of the memory diagnostics and initialization of the PPN bitmap 
and scatter/gather map. This memory is primarily for diagnostic purposes. 

E.1 .2 Contents of Main Memory 

The contents of main memory are undefined after the diagnostics have run. Typically, 
nonzero test patterns are left in memory. 

The diagnostics will "scrub" all of main memory, so that no power-up induced errors 
remain in the memory system. On the KA670 memory subsystem, the state of the ECC 
bits and the data bits are undefined on initial power-up. This can result in single and 
multiple-bit errors if the locations are read before being written, because the ECC bits 
are not in agreement with their correspsonding data bits. An aligned longword write to 
every location (done by diagnostics) eliminates all power-up induced errors. 

E.2 Memory Controller Registers 

The KA670 firmware assigns bank numbers to the MEMCSRs in ascending order, without 
attempting to disable physical banks that contain errors. High-order, unused banks are 
set to 0. Error loggers should capture the following bits from each MEMCSR register: 

• MEMCSR<31> (bank enable bit). As the firmware always assigns banks in ascending 
order, knowing which banks are enabled is sufficient information to derive the bank 
numbers. 

• MEMCSR<1:0> (bank usage). This field determines the size of the banks on the 
particular memory board. 

Additional information should be captured from registers MEMCSR32, MEMCSR33 
MEMCSR34, MEMCSR35, and MEMCSR36, as needed. 

E.2.1 Primary (On-ChIp) Cache 

The CPU primary (on-chip) cache is tested during the power-up diagnostics, flushed, and 
turned off. The cache is again turned on by the BOOT and INIT commands. Otherwise, 
the state of the on-chip cache is disabled. 

E.2.2 Translation Buffer 

The CPU translation buffer is tested by diagnostics on power-up, but not used by the 
firmware since it runs in physical mode. The translation buffer can be invalidated by 
using PR$_TBIA, IPR 57. 

E.2.3 Halt-Protected Space 

The KA670 firmware runs mostly in halt-unprotected space. Only the first 8 kilobytes of 
the total 2.56 kilobytes are protected. 
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F.1 Network Listening 

While the KA670 is waiting for a load volunteer during bootstrap, it listens on the 
network for other maintenance messages directed to the node. The KA670 identifies 
itself periodically at the end of each 8 to 12 minute interval before a bootstrap retry 
operation. This listening function supplements the MOP functions of the VMB load 
requester typically found in bootstrap firmware. Tlie listening function supports the 
following: 

• A remote console server that generates 

COUNTERS messages in response to REQ_COUNTERS messages, 
Unsolicited SYSTEMJD messages every 8 to 12 minutes 
Solicited SYSTEMJD messages in response to REQUESTJD messages 
Recognition of BOOT messages. 

• A loopback server that responds to Ethernet LOOPBACK messages by echoing the 
message to the requester. 

• An IEEE 802.2 responder that replies to both XID and TEST messages. 

During network operation, the firmware listens only to MOP load/dump, MOP remote 

console, and Ethernet loopback assistance message protocols (listed in Table F-4 ) 

directed to the Ethernet physical address of the node. All other Ethernet protocols 

are filtered by the network device driver. IEEE 802.3 messages are also processed by the 

network listener. 

Tables F-1 to F-4 summarize the MOP functions and message types supported by the 

KA670. 
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Table F-1 KA670 Network Maintenance Operations Summary 



Function Role 


IVanamit 




Receive 


MOP Ethernet and IEEE 802.3 Messages ' 


Dump Requester 








Server 








Load Requester 


REQ_ 
PROGRAM^ 


to solicit 


VOl,UNTEER 




REQ_MEM 
LOAD 


to solicit and 
acknowldege 


MEM_LOAD 






or 


MEM_LOAD_w_XFER 






or 


PABAM_LOAD_w_XFER 



Server 



Console 



Requester 








Server 


COUNTERS 


in response to 


RECLCOUNTERS 




SYSTEM_ID^ 


in response to 


REQUEST_ID 
BOOT 



Loopback 



Requester 
Server 



LOOPED_ 
DATA^ 



in response to LOOP_DATA 



IEEE 802.2 Messages'' 


Exchange 
ID 


Requester 










Server 


XID_RSP 


in response to 


XID_CMD 


Tbst 


Requester 










Server 


TEST_RSP 


in response to 


TEST_CMD 



' All unsolicited messages are sent in Ethernet (MOP V3) and IEEE 802.2 (MOP V4), until the MOP version 
of the server is known. All solicited messages arc sent in the format used for the request. 

^The initial REQ_PROGRAM message is sent to the dumpload multicast address. If an assistance 
VOLUNTEER message is received, then the respondcr's address is used as the destination to repeat the 
REQ_PROGRAM message and for all subsequent REQ31EM_L0A0 messages. 

^SYSTEMJD messages are sent out every 8 to 12 minutes to the remote console multicast address and on 
receipt of a REQUESTED message they are sent to the initiator. 

^L00PBD_DATA messages are sent out in response to L00P_0ATA messages. These messages are actually 
in Ethernet LOOP TEST format, not in MOP format, and when sent in Ethernet frantes omit the additional 
length field (padding is disabled). 

^lEEE 802.2 support of XID and TEST is limited to Class 1 operations. 
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Table F-2 Supported MOP Messages 



Message 
















Type 


Messagi 


e Fields 












Dump/Load 










MEM LOAD.w 


Code 


Load# 


Load addr 




Image data 




Xfer addr 


XJ'ER 


00 


nn 


aa-aa-aa-aa 


I 


None 




aa-aa-aa-aa 


MEM_LOAD 


Code 


Load# 


Load addr 




Image data 








02 


nn 


aa-aa-aa-aa 


I 


dd-... 






REQ. 


Code 


Device 


Format 


Program 


SWID 


Procesr 


Info 


PROGRAM 


08 


05 






3 




(Sec SYSTEMJD.) 






QNA 


01 


02 


C-17» 


00 








25 


V3 


Sys 


C-128 


Sys 








LQA 


04 V4 




2 










3D 






IfCll] 










KA640 






>00 










49 






Len 










KA670 






00 No 

ID 

FFOS 

FE 

Maint 







REQ_MEM_ 


Code 


Load# 


Error 






LOAD 


OA 


nn 


ee 






PARM LOAD 


Code 


Load# 


Prill 


Prm 


Prm val 


w XFER 


14 


nn 


typ 


len 


Target name ' 








01 


1-16 


Target addr ' 








02 


1-06 


Host name ' 








03 


1-16 


Host addr * 








04 


1-06 


Host time ' 








05 


OA 


Host time ^ 








06 


08 










00 End 







Xfer addr 
aa-aa-aa-aa 



VOLUNTEER 



Code 
03 



Remote Console 



REQUESTJD 



Code 
05 



Rsrvd 



Recpt # 



'MOP V3.0 only. 

^MOP x4.0 only. 

3Softwar« ID field is loaded from the string stored in the 40-byte RPB$T_FILE field of the RPB on a solicited 

boot. 
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Table F-2 (Cont.) Supported MOP Messages 



Message 












TVpe 


Message Fields 










Remote Console 


SYSTEMJD 


Code Rsrvd 


Recpt 


Info type 


Info 


Info value 




07 XX 


# 


01-00 Version 


len 


04-00-00 






nn-nn 


02-00 Functions 


03 


00-59 






or 


07-00 HW addr 


02 


ee-ee-ee-ee-ce-ee 






00-00 


64-00 Device 


06 


05, 25, 3D, or 49 








90-01 Datalink 


01 


01 








91-01 Bufr size 


01 
02 


06-04 



REQ_ 
COUNTERS 



Code 
09 



Recpt 
# 



COUNTERS 



Code 
OB 



Recpt 

# 



Counter block 



BOOT' 



Code Verification 

06 w-w-w-w-w-w- 

w-w 



Procesr Control 

00 XX 

Sys 



DevID 
C-17 



SWID 

3 



(see 

REQ_ 

PROGRAM) 



Script 
ID 2 
C-128 



Loopback 


LOOP_DATA 


Skpcnt 

nn- 
nn 


Skipped bytes 
bb-... 


Function 
00-02 Forward 
data 


Forward addr 
ee-ee-ee-ee-ee-ee 


Data 
dd-... 


LOOPED_DATA 


Skpcnt 

nn- 
nn 


Skipped bytes 
bb-... 


Function 
00-01 Reply 


Recpt* 
nn-nn 


Data 
dd-... 


IEEE 802^ 


XID_CMD/RSP 


Form 
81 


Class Rx window size (K) 
01 00 






TEST_CMD/RSP 


Optional data. 









2MOPx4 0only. 

^Software ID field is loaded from the string stored in the 40-byte RPB$T_FILE field of the RPB on a solicited 
boot. 

*A BOOT message is not verified, since in this context, a boot is already in progress. However, a received BOOT 
message will cause the boot backon* timer to be reset to it's minimum value. 
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Table F-3 Ethernet & IEEE 802.3 Packet Headers 



Ethernet MOP Message Format (MOP V3) 



Dest_address Src.address Prot Len MOP msg 

dd-dd-dd-dd- ss-ss-ss-ss- 60-01 nn- dd-... 

dd-dd ss-ss nn 

60-02 nn- dd-... 

nn 

90-00 dd-... 



Pad CRC 

XX-... cc-cc 



IEEE 802.3 SNAP SAP MOP Message Format (MOP V4) 



Dest_address 


Src_addre3S 


Un 


DSAP 


SSAP 


Ctl 


P_1D 


MOP_ 
msg 


CRC 


dd-dd-dd-dd- 
dd-dd 


ss-ss-ss-ss- 
ss-ss 


nn- 
nn 


AA 


AA 


03 


08-00-28-60- 

01 

08-00-2B-60- 

02 

08-00-2B-90- 

00 


dd-... 


cc-cc 



IEEE 802.3 XBO/TEST Message Format (MOP V4) 



Dest_addre3s 

dd-dd-dd-dd- 
dd-dd 



Src_address 

98-9S-8S-SS- 
8S-39 



Ijen 

nn- 
nn 



DSAP SSAP Ctl 1 
aa bb cc 



Data CRC 

ff-tt-3s (XID) cc-cc 

Optional data (TEST) 



»XID and TEST messages are identified in the IEEE 802.2 control field with binary 101x1111 and 111x0011. 
respectively, "x" denotes the Poll/Final bit which gets echoed in the response. 



Table F-4 MOP Multicast Addresses and Protocol Specifiers 



Function 


Address 


IEEE 
Prefix* 


Protocol 


Owner 


Dump/Load 


AB-00-00-01-00-00 


08-00-2B 


60-01 


Digital 


Remote Console 


AB-00-00-02-00-00 


08-00-2B 


60-02 


Digital 


Loopback Assistance 


CF-00-00-00-00-00 

2 


08-00-2B 


90-00 


Digital 


>MOP 4.0 only. 










^Not used. 
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F.2 MOP Counters 

The following counters are kept for the Ethernet boot channel. All coimters are unsigned 
integers. V4 counters rollover on overflow. All V3 counters latch at their maximum 
value to indicate overflow. Unless otherwise stated, all counters include both normal 
and multicast traffic. Furthermore, they include information for all protocol types. 
Frames received and bytes received counters do not include frames received with errors. 
Table F-5 displays the byte lengths and ordering of all the counters in MOP Versions 3.0 
and 4.0. 



Table F-5 MOP Counter Block 



Name 



Byte Length 
V3 V4 



TIME_SINCE_CREATION 

Ilx_BYTES 

Tx_BYTES 

Rx_FRAMES 

Tx_FRAMES 

Rx_MCAST_BYTES 

R!C_MCAST_FRAMES 

Tx_INIT_DEFFERED 

Tx_ONE_COLLISION 

Tx_MULTI_COLLISION 



TxFAIL_EXCESS_COLLS 

TxFAIL_CARIER_CHECK 

TxFAIL_SHRT_CIRCUIT 

TxFAIL_OPEN_CIRCUIT 

TxFAIL_LONG_FRAME 

TxFAIL_REMOTE_DEFER 



RxFAIL_BLOCK_CHECK 

RxFAIL_FRAMING_ERR 

RxFAIL_LONG_FRAME 

UNKNOWN, 
DESTINATION 

DATA OVERRUN 



Description 



2 16 Time since last zeroed 

4 8 Bytes received 

4 8 Bytes sent 

4 8 Frames received 

4 8 Frames sent 

4 8 Multicast bytes received 

4 8 Multicast frames received 

4 8 Frames sent, initially deferred' 

4 8 Frames sent, single collision * 

4 8 Frames sent, multiple collisions* 

2 Send failure ^ 

2 Send failure bitmap ^ 

8 Send failure - Excessive collisions 

8 Send failure - 1 Carrier check failed 

8 Send failure - 2 Short ciruit ' 

8 Send failure - 3 Open Circuit ^ 

8 Send failure - 4 Frame too long^ 

8 Send failure - 5 Remote failure to defer^ 

2 Receive failure ^ 

2 Receive failure bitmap ^ 

8 Receive failure - Block check failure 

8 Receive failure - Framing error 

8 Receive failure - Frame tcto long^ 

2 8 Unrecognized frame destination 

2 8 Data overrun 



'Only one of these three counters will be incremented for a given frame. 

^VS send/receive failures are collapsed into one counter with bitmap indicating which failures occurred. 

^Always 0. 



NO_SYSTEM_BUFFER 


2 


8 


NO_USER_BUFFER 


2 


8 


FAIL COLLIS_DETECT 




8 
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Table F-5 (Com.) MOP Counter Block 

Byte Length 
Name V3 V4 Description 

System buffer unavailable* 
User buffer unavailable ' 
Collision detect check failure 

^Always 0. 

The following list describes each of the counters in more detail. 

• Time since last zeroed. The time which has elapsed, since the counters were last 
zeroed. Provides a frame of reference for the other counters by indicating the amount 
of time they cover. For MOP Version 3, this time is the number of seconds. MOP 
Version 4 uses the UTC binary relative time format. 

• Bytes received. The total number of user data bytes successfully received. This 
does not include Ethernet data link headers. This number is the number of bytes 
in the Ethernet data field, which includes any padding or length fields when they 
are enabled. These are bytes from frames that passed hardware filtering. When the 
number of frames received is used to calculate protocol overhead, the overhead plus 
bytes received provides a measurement of the amount of Ethernet bandwidth (over 
time) consumed by frames addressed to the local system. 

• Bytes sent. The total number of user data bytes successfully transmitted. This 
does not include Ethernet data link headers or data link generated retransmissions. 
This number is the number of bytes in the Ethernet data field, which includes 
any padding or length fields when they are enabled. When the number of frames 
sent is used to calculate protocol overhead, the overhead plus bytes sent provides a 
measurement of the amount of Ethernet bandwidth (over time) consumed by frames 
sent by the local system. 

• Frames received. The total number of frames successfully received. These are 
frames that passed hardware filtering. Provides a gross measurement of incoming 
Ethernet usage by the local system. Provides information used to determine the ratio 
of the error counters to successful transmits. 

• Frames sent. The total number of frames successfully transmitted. This does 
not include data link generated retransmissions. Provides a gross measurement of 
outgoing Ethernet usage by the local system. Provides information used to determine 
the ratio of the error counters to successful transmits. 

• Mtdticast bytes received. The total number of multicast data bytes successfiilly 
received. This does not include Ethernet data link headers. TlKis number is the 
number of bytes in the Ethernet data field. In conjunction with total bytes received, 
provides a measurement of the percentage of this system's receive bandwidth (over 
time) that was consumed by multicast frames addressed to the local system. 

• Multicast frames received. The total number of multicast frames successfully 
received. In conjunction with total frames received, provides a gross percentage of 
the Ethernet usage for multicast frames addressed to this system. 

• Frames sent, initially deferred. The total number of times that a frame 
transmission was deferred on its first transmission attempt. In conjunction with 
total frames sent, measures Ethernet contention with no collisions. 
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Frames sent, single collision. The total number of times that a frame was 
successfully transmitted on the second attempt after a normal collision on the first 
attempt. In conjunction with total frames sent, measures Ethernet contention at a 
level where there are collisions but the backoff algorithm still operates efficiently. 

Frames sent, multiple collisions. The total number of times that a frame 
was successfully transmitted on the third or later attempt after normal collisions 
on previous attempts. In conjunction with total frames sent, measures Ethernet 
contention at a level where there are collisions and the backoff algorithm no longer 
operates efficiently. 

NOTE 

No single frame is counted in more than one of the above three counters. 

Send failures. The total number of times a transmit attempt failed. Each time the 
counter is incremented, a type of failure is recorded. When a read counter function 
reads the counter, the list of failures is also read. When the coiuriter is set to 0, 
the list of failures is cleared. In conjunction with total frames sent, this provides a 
measure of significant transmit problems. All of the problems reflected in this counter 
are also captured as events. Following are the possible failures. More information on 
their meanings and use can be found in the section on events. 

- Excessive collisions. Exceeded the maximum number of retransmissions due 
to collisions. Indicates an overload condition on the Ethernet. 

- Carrier check failed. The data link did not sense the receive signal that is 
required to accompany the transmission of a frame. Indicates a failure in either 
the transmitting or receiving hardware. Could be caused by either transceiver, 
transceiver cable, or a babbling controller that has been cut off, 

- Short circuit. There is a short somewhere in the local area network coaxial 
cable or the transceiver or controller/transceiver cable has failed. This indicates a 
problem either in local hardware or global network. The two can be distinguished 
by checking to see if other systems are reporting the same problem. 

- Open circuit. There is a break somewhere in the local area network coaxial 
cable. This indicates a problem either in local hardware or global network. The 
two can be distinguished by checking to see if other systems are reporting the 
same problem. 

- Frame too long. The controller or transceiver cut off transmission at the 
maximum size. This indicates a problem with the local system. Either it tried to 
send a frame that was too long or the hardware cutoff transmission too soon. 

- Remote failure to defer. A remote system began transniitting after the 
allowed window for collisions. This indicates either a problem with some other 
system's carrier sense or a weak transmitter. 

Receive failures. The total number of frames received with some data error. 
Includes only data frames that passed either physical or multicast address 
comparison. This counter includes failure reasons in the same way as the send 
failure counter. In conjunction with total frames received, this provides a measure of 
data related receive problems. All of the problems reflected in this counter are also 
captured as events. Following are the possible reasons. More information on their 
meaning and use can be found in the section on events. 

Block check error. A frame failed the CRC check. This indicates several 
possible failures, such as, EMI, late collisions, or improperly set hardware 

parameters. 
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Framing error. The frame did not contain an integral number of 8-bit 
bytes. This indicates several possible failures, such as, EMI, late collisions, or 
improperly set hardware parameters. 

Frame too long. The frame was discarded because it was outside the Ethernet 
maximum length and could not be received. This indicates that a remote system 
is sending invalid length frames. 

Unrecognized firame destination. The number of times a frame was 
discarded because there was no portal with the protocol type or multicast address 
enabled. This includes frames received for the physical address, the broadcast 
address, or a multicast address. 

Data overrun. The total number of times the hardware lost an incoming frame 
because it was unable to keep up with the data rate. In conjunction with total 
frames received, provides a measure of hardware resource failures. The problem 
reflected in this counter is also captured as an event. 

System buffer unavailable. The total number of times no system buffer 
was available for an incoming frame. In conjunction with total frames received, 
provides a measure of system buffer related receive problems. The problem 
reflected in this counter is also captured as an event. This can be any buffer 
between the hardware and the user buffers (those supplied on receive requests). 
Further information as to potential different buffer pools is implementation 
specific. 

User buffer unavailable. The total number of times no user buffer was 
available for an incoming frame that passed all filtering. These are the buffers 
supplied by users on receive requests. In conjunction with total frames received, 
provides a measure of user buffer related receive problems. The problem reflected 
in this counter is also captured as an event. 

Collision detect check failure. The approximate number of times that 
collision detect was not sensed after a transmission. If this counter contains a 
number roughly equal to the number of frames sent, either the collision detect 
circuitry is not working correctly or the test signal is not implemented. 
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This appendix describes public ROM partitioning and subroutine entry points that are 
guaranteed to be compatible over future versions of the KA670 firmware. 

G.I Firmware EPROM Layout 

The KA670 uses two 128-kilobyte EPROMs for a total of 256 kilobytes. Unlike previous 
Q22-bus based Micro VAX processors, there is no duplicate decoding of the EPROM 
into halt-protected and halt-unprotected spaces. The entire EPROM (Figure G-1) is 
halt-protected. 



20040000 


Branch Instruction 


20040006 


System Id Extension 


20040008 


CP$GETCHAR_R4 


2004000C 


CP$MSG_OUT_NOLF_R4 


20040010 


CP$READ_WTH_PRMPT_R4 


20040014 


Rsvd Mfg L200 Testing 


20040018 


Def Boot Dev Dscr Ptr 


2004001c 


Def Boot Flags Ptr 


20040200 


Recovery Bootstrap 


2004 1FFC 


Fixed Area Checksum 


20042000 


Reserved Jor Digital 


20044000 


Console, Diagnostic 
and Boot Code 




Console Checksum 




Reserved for Digital 


2007 FOOO 
2007FFFF 


4096 Bytes Reserved 
for Customer Use 



Figure G-1 KA670 EPROM Layout 

The first instruction executed on halts is a branch around the system ID extension (SIE) 
and the callback entry points. This allows these public data structures to reside in fixed 
locations in the EPROM. 



396 



ROM Partitioning 397 



The callback area entry points provide a simple interface to the currently defined console 
for VMB and secondairy bootstraps. This is documented further in the next section. 

The fixed area checksum is the sum of longwords fi-om 20040000 to the checksum 
inclusive. This checksum is distinct from the checksum that the rest of the console 
uses. 

The console, diagnostic and boot code constitute the bulk of the KA670 firmware. This 
code is field-upgradeable. The console checksum is from 20044000 to the checksum 
inclusive. 

The memory between the console checksum and the user area at the end of the EPROMs 
is reserved for Digital, for future expansion of the KA670 firmware. The contents of this 
area is set to FF. 

The last 4096 bytes of EPROM is reserved for customer use and is not included in the 
console checksum. During a PROM bootstrap with PRBO as the selected boot device, 
this block is the tested for a PROM signature block. Refer to Section Section 9.5.3.2 and 
Figure 9-9 for a description of the boot block mechanism. 

G.1.1 Call-Back Entry Points 

The KA670 firmware provides several entry points that facilitate I/O to the designated 
console device. Users of these entry points do not need to be aware of the console device 
type, be it a video terminal or workstation. 

The primary intent of these routines is to provide a simple console device to VMB and 
secondary bootstraps, before operating systems load their own terminal drivers. 

These are JSB (subroutine, as opposed to procedure) entry points located in fixed 
locations in the firwmare. These locations branch to code that in turn calls the 
appropriate routines. 

All of the entry points are designed to run at IPL 31 on the interrupt stack in physical 
mode. Virtual mode is not supported. Due to internal firmware architectural restrictions, 
users are encouraged to only call into the halt-protected entry points. These entry points 
are listed below. 

CP$GET_CHAR_R4 20040008 

CP$MSG_0UT_N0LF_R4 2004000C 

CP$READ_WTH_PRMPT_R4 20040010 

G.I. 1.1 CP$GETCHAR_R4 

This routine returns the next character entered by the operator in RO. A timeout interval 
can be specified. If the timeout interval is zero, no timeout is generated. If a timeout is 
specified and if timeout occurs, a value of 18 (CAN) is returned instead of normal input. 

Registers R0,R1,R2,R3 and R4 are modified by this routine, all others are preserved. 
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Usage with timeout; 



movl 



itimeout in tenths of second, rO ; Specify timeout. 



jsb @#CP$GET_CHAR_R4 
cmpb r0,#''xl8 
beql timeout_handler 
; Input is in RO . 



Call routine. 
Check for timeout. 
Branch if timeout. 



; Usage without timeout: 

clrl rO 

jsb @#CP$GET_CHAR_R4 

; Input is in RO. 



Specify no timeout. 
Call routine. 



G.I. 1.2 CP$MSG_OUT_NOLF_R4 

This routine outputs a message to the console. The message is specified either by a 
message code or a string descriptor. The routine distinguishes between message codes 
and descriptors by requiring that any descriptor be located outside of the first page of 
memory. Hence, message codes are restricted to values between an(i 511. 

Registers R0,R1,R2,R3 and R4 are modified by this routine, all others are preserved. 



; Usage with message code: 

movzbl #console_message_code, rO 
jsb @#CP$MSG_0UT_N0LF_R4 



Specify message code. 
Call routine. 



Usage with a message descriptor (position dependent) . 



movaq 5$,r0 

jsb @#CP$MSG_0UT_N0LF_R4 



Specify address of desc. 

Call routine. 



5$: 



•ascid /This is a message/ 



; Message with descriptor. 



; Usage with a message descriptor (position independent) 



pushab 5$ 

pushl #10$-5$ 

movl sp, rO 

jsb ? #CP$MSG_0UT_NOLF_R4 

clrq (sp)+ 



; Generate message desc. 

; on stack. 

; Pass desc. addr. in RO. 

; Call routine. 

; Purge desc. from stack. 



5$: .ascii /This is a message/ 

lOS: 



Message. 



0.1. 1.3 CP$READ_WTH_PRMPT_R4 

This routine outputs a prompt message and then inpu ts a ch aract er string from the 
console. When the input is accepted, <I] (delete), {QH] 0, and |Ctrl| |r| functions are 
supported. 

As with CP$MSG_0UT_N0LF_R4, either a message code or the address of a string 
descriptor is passed in RO to specify the prompt string. A value of zero results in no 
prompt. 
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A descriptor of the input string is returned in RO and Rl. RO contains the length 
of the string and Rl contains the address. This routine inputs the string into the 
console program string buffer and therefore the caller need not provide an input buffer. 
Successive calls however destroy the previous contents of the input buffer. 

Registers RO, Rl, R2, R3, and R4 are modified by this routine. All other registers are 
preserved. 



; Usage 


with a message descriptor 


(position independent) . 


pushab 


10$ 


; Generate prompt desc . 


pushl 


#10$-5$ 


; on stack. 


movl 


sp,rO 


; Pass desc. addr. in RO. 


jsb 


e#CPSREAD WTH PRMPT R4 


; Call routine. 


clrq 


(sp) + 


; Purge prompt desc. 


• 




; Input desc in RO and Rl . 


5$: 


.ascii /Prompt> / 


; Prompt string. 


10$: 







G.1.2 Boot Information Pointers 

Two longwords located in EPROM are used as pointers to the default boot device 
descriptor and the default boot flags, since the actual location of this data may change 
in successive versions of the firmware. Any software that uses these pointers should 
reference them at the addresses in halt-protected space. 



20040018 


























' 


' 








Class 


Type 


Desc. Length 












ASCIZ Dev.Name String 






ue 


Vll,« 


; oiriiiy 


ril. 





2004001c 



Det.Boot Flags Ptr. 



Boot Flags (Longword) 



The following macro defines the boot device descriptor format. 
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Default Boot Device Descriptor 

boot_device_descriptor: : 
base " . 

" base + dsc$w_length 
.word nvr$s_boot_device 

" base + dsc$b_dtype 
byte dsc$lc_dtype_z 

- base + dsc$b_class 
byte dsc$k_class_z 

-■ base + dsc$a_pointer 
long nvr_base + nvr$b_boot_device 

" base + dsc$s dscdefl 
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This appendix describes how the KA670 firmware partitions the 1 kilobyte of battery 
backed-up (BBU) RAM on the SSC chip. 

H.1 SSC RAM Layout 

The KA670 firmware uses the 1 kilobyte of battery backed-up RAM on the SSC to store 
firmware-specific data structures and other information that must be preserved across 
power cycles. This BBU RAM resides in the SSC chip, starting at address 20140400 
(Figure H-1). The BBU RAM should not be used by the operating systems except as 
documented here. The BBU RAM is not reflected in the bitmap built by the firmware. 



20140400 



201407FC 



Public Data Stuctures 
(CPMBX, etc.) 



Service Vectors 



Firmware Stack 



Diagnostic State 



Rsvd.for Customer Use 



Figure H-1 KA670 SSC BBU RAM Layout 
H.1.1 Public Data Structures 

This section describes the public data structures in BBU RAM used by the console. 

Fields that are desginated as reserved and/or internal use should not be written, since 
there is no protection against such corruption. 
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H.I. 2 Console Program Mailbox (CPMBX) 

The console program mailbox (CPMBX) is a software data structure located at the 
beginning of BBU RAM (20140400). The CPMBX is used to pass information between the 
KA670 firmware and diagnostics, VMB, or an operating system. It consists of three bytes 
referred to here as NVRO, NVRl, and NVR2 (Figures H-2 to H^). 



NVRO 



1 Language 


RIP 


BIP 


hlt_act| 



Figure H-2 NVRO (20140400) : Console Program Mailbox (CPMBX) 



Field Name 



Description 



7:4 Language This field specifies the current selected language for displaying halt and 

error messages on terminals which support MCS. 

3 RIP If set, a restart attempt is in progress. This flag must be cleared by the 

operating system, if the restart succeeds. 

2 BIP If set, a bootstrap attempt is in progress. This flag must be cleared by the 

operating system if the bootstrap succeeds. 

1:0 HLT_ACT Processor halt action - this field in conjunction with the conditions 

specified in Table 9-1 is used to control the automatic restart/bootstrap 
procedure. HLT_ACT is normally written by the operating system. 

: Restart; if that fails, reboot; if that fails, halt. 

1 : Restart; if that fails, halt. 

2 : Reboot; if that fails, halt. 

3 : Halt. 



NVR1 



7 


6 


5 


4 


3 


2 


1 





1 


MCS 


CRT 





Figure H^ NVRl (20140401) 



Field Name 



Description 



MCS 



CRT 



If set, indicates that the attached terminal supports DEC Multinational 
Character Set. If clear, MCS is not supported. 

If set, indicates that the attached terminal is a CRT. If clear, indicates 
that the terminal is hardcopy. 
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7 6 5 4 3 2 10 
NVR2 



Keyboard 



Figure H-4 NVR2 (20140402) 



Field Name Description 



7:0 Keyboard This field indicates the national keyboard variant in use. 

H.1.3 Firmware Stack 

This section contains the stack that is used by all of the firmware, with the exception of 
VMB, which has its own built in stack. 

H.1.4 Diagnostic State 

This area is used by the firmware-resident diagnostics. This section is not documented 
here. 

H.1.5 User Area 

The KA670 console reserves the last longword (address 201407FC) of the BBU RAM for 
customer use. This location is not tested by the console firmware. Its value is undefined. 
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This appendix contains definitions of key global data structures used by the KA670 
firmware. 

1.1 Halt Dispatch State Machine 

The KA670 halt dispatcher determines what actions the firmware will take on halt entry 
based on the machine state. The dispatcher is implemented as a state machine, which 
uses a single bitmap control word and the transition Table I-l to process all halts. The 
transition table is sequentially searched for matches with the current state and control 
word. If there is a match, a transition occurs to the next state. 

The control word is comprised of the following information. 

• Halt Type, used for resolving external halts. Valid only if the halt code is 00. 

000 : power-up state 

001 : halt in progress 

010 : negation of Q22-bus DCOK 

Oil : console BREAK condition detected 

100 : Q22-bus BHALT 

101 : SGEC BOOT_L asserted (trigger boot) 

• Halt Code, compressed form of SAVPSL<13:8>(RESTART_CODE). 

00 : RESTART.CODE = 2, external halt 

01 : RESTART_CODE = 3, power-up/reset 

10 : RESTART_CODE = 6, halt instruction 

11 : RESTART_CODE = any other, error halts 

• Mailbox Action, passed by an operating system in CPMBX<1:0>(HALT_ACTION). 

00 : restart, boot, halt 

01 : restart, halt 

10 : boot, halt 

11 : halt 

• User Action, specified with the SET HALT console command. 

000 : default 

001 : restart, halt 
010 : boot, halt 
Oil : halt 

100 : restart, boot, halt 

• HEN, BREAK (halt) enable switch, BDR<7> 

• ERR, error status 



404 



Data Structures 405 



• TIP, trace in progress 

• DIP, diagnostics in progress 

• BEP, bootstrap in progress CPMBX<2> 

• RIP, restart in progress CPMBX<3> 

Table 1-1 Firmware State Transition Table 



Current 
State 



ENTRY 
ENTRY 
ENTRY 
ENTRY 



RESET 
INIT 

BREAK 
INIT 

TRACE 

INIT 

OTHER 
INIT 



INIT 
INIT 
INIT 

INIT 
TRACE 



Next 
State 



Mailbx 
Halt Halt User HEN-ERR-TIP-DIP- 

Type Code Action Action BIP-RBP 



->RESET 
INIT 

->BREAK 
INIT 

->TRACE 
INIT 

->OTHER 
INIT 



->INIT 



->INIT 



->INIT 



->INIT 



Perform conditional initialization. 
01 



1 

XXX 



oil 



XXX 



XXX 



00 
10 

XX 



XX 



XX 



XX 



XX 



XXX 



XXX 



XXX 



Perform common initialization. ^ 

XXX XX XX XXX 



XXX 



XXX 



XXX 



XX 



XX 



XX 



XX 



XX 



XXX 



XXX 



Check for external halts. * 

->BOOTSTRAP 010 00 xx xxx 

->BOOTSTRAP 101 00 xx xxx 

->HALT xxx 00 XX xxx 

Check for pending (NEXT) trace. * 

->TRAGE xxx 10 xx xxx 

->EXIT xxx 10 XX xxx 



X - X - X - X - X - X 
X - X - X - X - X - X 

X - - 1 - X - X - X 

X - X - X - X - X - X 

X - X - X - X - X - X 
X - X - X - X - X - X 
X - X - X - X - X - X 
X -X -X -X- X -X 

-X - X - X-X - X 
X -X - X - X -X - X 
X - X -X -X -X -X 

X -X - 1 -X-X -X 

x-0-l-x-x-x 



^ Perform a unicpie initialization routine on entry. In particular, power-ups, BREAKs, and TRACEs require 
special initialization. Any other halt entiy performs a default initialization. 

^- After performing conditional initialization, complete common initialization. 

"' Halt on all external halts, except. 

if DCOK (unlikely) and halts are disabled, bootstrap, 
if SGEiC remote trigger, bootstrap. 

* Unconditionally enter the TRACE state, if the TIP flag is set and the halt was due to a HALT instruction. 
From the TRACE state the firmware exits, if TIP is set and ERR is clear, otherwise it halts. 

X = don't care field. 
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Tabre 1-1 (Com.) Firmware State Transition Tabie 



Current 
State 


Next 
State 


Halt 
Type 


Halt 
Code 


Mailbx 
Action 


User 
Action 


HEN-ERR-TEP-DIP. 
Bff-EIP 


TRACE 


->HALT 


XXX 


XX 


XX 


XXX 


X -X- X -X - X - X 






Check for bootstrap conditions. ^ 




INIT 


->BOOTSTRAP 


XXX 


01 


XX 


XXX 


0-0-0-0-0-0 


INIT 


->BOOTSTRAP 


XXX 


01 


XX 


010 


1-0-0-0-0-0 


INIT 


->BOOTSTRAP 


XXX 


01 


XX 


100 


1-0-0-0-0-0 


INIT 


->BOOTSTRAP 


XXX 


Ix 


10 


XXX 


x-0-0-0-0-0 


INIT 


->BOOTSTRAP 


XXX 


Ix 


00 


010 


x-0-0-0-0-0 


INIT 


->BOOTSTRAP 


XXX 


Ix 


00 


100 


x-0-0-0-0- 1 


INIT 


->BOOTSTRAP 


XXX 


Ix 


00 


100 


X- 1-0-0-0-x 


INIT 


->BOOTSTRAP 


XXX 


Ix 


00 


000 


0-0-0-0-0-1 


RESTART 


->BOOTSTRAP 


XXX 


Ix 


00 


000 


0-1-0-0-O-x 






Check for restart conditions. 


6 




INIT 


->RESTART 


XXX 


Ix 


01 


XXX 


x-0-0-0-0-0 


INIT 


->RESTART 


XXX 


Ix 


00 


001 


x-O-O-O -0-0 


INIT 


->RESTART 


XXX 


Ix 


00 


100 


x-0-0-0-0-0 


INIT 


->RESTART 


XXX 


Ix 


00 


000 


0-0-0-0-0-0 



Perform common exit processing, if 
no errors. ' 



BOOTSTRAP 


->EXIT 


XXX 


XX 


XX 


XXX 


X - - X -X -X -X 


RESTART 


->EXIT 


XXX 


XX 


XX 


XXX 


X - - X - X - X - X 


HALT 


->EXIT 


XXX 


XX 


XX 


XXX 


X - - X - X - X - X 






Exception transitions, just halt. ® 




INIT 


->HALT 


XXX 


XX 


XX 


XXX 


X -X- X-X -X -X 


BOOT 


->HALT 


XXX 


XX 


XX 


XXX 


X - X - X - X - X - X 


REST 


->HALT 


XXX 


XX 


XX 


XXX 


X - X - X - X - X - X 



'' Bootstrap, 

if powerup and halts are disabled. 

if powerup and halts are enabled and user action is 2 or 4. 

if not powerup and mailbox is 2. 

if not powerup and mailbox is and user action is 2. 

if not powerup and restart failed and mailbox is and user action is or 4. 

^ Restart the operating system if not power-up and, 

if mailbox is 1. 

if mailbox is and user action is 1 or 4. 

if mailbox is and user action is and halts are disabled. 



^ Exit alter halts, bootstrap or restart. The exit state transitions to program I/O mode. 
'^ Guard block that catches all exception conditions. In all cases, just halt. 
X = don't care field. 
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Table 1-1 (Cont.) Firmware State Transition Table 



Current 
State 



Next 
State 



Mailbx 
Halt Halt User HEN-ERR-TIPDn>- 

Type Code Action Action BIP-RIP 



HALT 


->HALT 


XXX 


XX 


XX 


XXX 


X - X -X -X -X - X 


TRACE 


->HALT 


XXX 


XX 


XX 


XXX 


X -X -X -X-X - X 


b:xit 


~>HALT 


XXX 


XX 


XX 


XXX 


X - X-X - X - X - X 



X = don't care field. 



A transition to a next state occurs if a match is found between the control word and a 
current state entry in the table. The firmware does a linear search through the table 
for a match. Therefore, the order of the entries in the transition table is important. The 
control longword is reassembled before each transition from the current machine state. 
The state machine transitions are shown in Table I-l. 

1.2 Restart Parameter Biock(RPB) 

VMB typically utilizes the low portion of memory unless there are bad pages in the first 
128 kilobytes. The first page in its block is used for the restart parameter block (RPB), 
which the VMB uses to communicates with the operating system. Usually, this is page 0. 

VMB will initialize the restart parameter block as follows (Table 1-2): 



Table 1-2 Restart Parameter Block Fields 



(Rll)+ Field Name 



Description 



00: 


RPB$L_BASE 


04: 


RPB$L 

RESTART 


08: 


RPB$L 
CHKSUM 


OC: 


RPB$L_ 
RSTRTFLG 


10: 


RPB$L 

HALTPC 


10: 


RPB$L_ 
HALTPSL 


18: 


RPB$L 
HALTCODE 


IC: 


RPB$L 
BOOTRO 



20: 



RPB$L_ 
BOOTRl 



Physical address of base of RPB. 
Cleared. 



Cleared. 



RIO on entry to VMB (HALT PC). 
PR$_SAVPSL on entry to VMB (HALT PSL). 
AP on entry to VMB (HA1.T CODE). 

RO on entiy to VMB. 

NOTE 

The field RPB$W_ROUBVEC, which overlaps the high-order 
word of RPB$L_BOOTR0, is set by the boot device drivers to 
the SCB offset (in the second page of the SOB) of the interrupt 
vector for the boot device. 

VMB version number. The high-order word of the version is the major 
ID and the low-order word is the minor ID. 
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Table 1-2 (Cont.) Restart Parameter Block Fields 



(Rll)+ Field Name 



Description 



24: 


RPB$L 
BOOTR2 


28: 


RPB$L 
BOOTR3 


2C: 


RPB$L 
BOOTR4 



30: 


RPB$L 
BOOTR5 


34: 


RPB$L_IOVEC 


38: 


RPB$L 
lOVECSZ 


3C: 


RPB$L 
FILLBN 


40: 


RPB$L_FILSIZ 


44: 


RPB$Q_ 
PFNMAP 



4C: 


RPB$L_ 

PFNCNT 


50: 


RPB$L 

SVASPT 


54: 


RPB$L 
CSRPHY 


58: 


RPB$L_ 
CSRVIR 


5C: 


RPB$L_ 
ADPPHY 


60: 


RPB$L 
ADPVIR 


64: 


RPB$W_UNIT 



R2 on entry to VMB. 



R3 on entry to VMB. 



R4 on entry to VMB. 

NOTE 

The 48 bit booting node address is stored in ELPB$LJBOOTR3 
and RPB$L_BOOTR4 for compatibility with ELN Vl.l (this field 
is only initialized this way when performing a network boot). 

R5 on entry to VMB. 

Physical address of boot driver's I/O vector of transfer addresses. 
Size of BOOT QIO routine. 

LBN of secondary bootstrap image. 

Size of secondary bootstrap image in blocks. 

The PFN bitmap is a array of bits, where each bit has the value 1 if 
the corresponding page of memory is valid, or has the value if the 
corresponding page of memoty contains a memory error. Through use 
of the PFNMAP, the operating system can avoid memory errors by 
avoiding known bad pages altogether. The memory bitmap is always 
page-aligned, and describes all the pages of memory from physical 
page #0 to the high end of memory, but excluding the PFN bitmap 
itself and the Q-bus map registers. 

If the high byte of the bitmap spans some pages available to the 
operating system and some pages of the PFN bitmap itself, the pages 
corresponding to the bitmap itself will be marked as bad pages. The 
first longword of the PFNMAP descriptor contains the number of bytes 
in the PFNMAP. The second longword contains the physical address of 
the bitmap. 

Count of good pages of physical memory, but not including the pages 
allocated to the Q22-bus scatter/gather map, the console scratch area, 
and the PFN bitmap at the top of memory. 

0. 



Physical address of CSR for boot device. 
0. 



Physical address of ADR (really the address of QMRs - '^x800 to look 
like a UBA adapter). 

0. 



Unit number of boot device. 
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Table 1-2 (Cont.) Restart Parameter Block Fields 



(Rll)+ Field Name 



Description 



66: 


RPB$B_ 
DEVTYP 


67: 


RPB$B_SLAVE 


68: 


RPB$T_FILE 



90: 


RPB$B 
CONPREG 


AO: 


RPB$B 
HDRPGCNT 


Al: 


RPB$W 
BOOTNDT 


BO: 


RPB$L_SCBB 


EC: 


RPB$L 
MEMDSC 


CO: 


RPB$L_ 

MEMDSC+4 



Device type code of boot device. 



Slave number of boot device. 

Name of secondary bootstrap image (defaultis to 
[SYSO.SYSEXE1SYSBOOT.EXE). This field (up to 40 bytes) is over- 
written with the input string on a 'solicit' boot. 

NOTE 

1 : For VAX/VMS, the RPB$T_FILE must contain the root 
directory string SYSn. on a non-network boot-strap. This 
string is parsed by SYSBOOT (ie SYSBOOT does not use the 
high nibble of BOOTR5). 2 : The RPB$T_FILE is over-written 
to contain the boot node name for compatibility with ELN 
Vl.l (this field is only initialized this way when performing a 
network boot). 

Array (16 bytes) of adapter types (NDT$_UBO - UNIBUS ). 

Count of header pages. 

Boot adapter nexus device type. Used by SYSBOOT and INIADP (OF 
SYSLOA) to configure the adapter of the boot device (changed irom a 
byte to a word field in Version 12 of VMB). 

Physical address of SCB. 

Count of pages in physical memory including both good and bad pages. 
The high 8 bits of this longword contain the TR #, which is always zero 
for KA670. 

PFN of the first page of memory. This field is always zero for KA670, 
even if page #0 is a bad page. 

NOTE 

No other memory descriptors are used. 



104: 
108: 



RPB$L 
BADPOS 

RPB$B 
CTRLLTR 



Count of bad pages of physical memory. 

Boot device controller number biased by 1. In VAXATMS, this field is 
used by INIT (in SYS) to construct the boot device's controller letter. A 
zero implies this field has not been initialized, else if initialized, A=l, 
B=2, etc. (this field was added in Version 13 of VMB). 

The rest of the RPB is zeroed. 



1.3 VMB Argument List 

The VMB code will also initialize an argument list as follows (Table 1-3): 
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Table 1-3 VMB Argument List 



(AP)-i- Field Name 



Description 



04: 
OC: 
10: 
14: 

IC: 
24: 

2C: 

30: 
34: 



VMB$L_ 
FILECACHE 

VMBSL_LO_ 
PPN 

VMB$L_HI 
PFN 

VMB$Q_ 
PFNMAP 



VMB$Q_ 
UCODE 

VMB$B_ 
SYSTEMID 



VMB$L_ 
FLAGS 

VMB$L_CI 
HIPFN 

VMB$Q_ 
NODENAME 



3C: VMB$Q_ 

HOSTADDR 



44: VMB$Q_ 

HOSTNAME 



4C: VMB$CLTOD 



54: VMB$L_ 

XPARAM 

58: 



Quadword filename. 

PPN of first page of physical memory (always zero, regardless of where 
128 Kbytes of good memory starts). 

PFN of last page of physical memory. 

Descriptor of PFN bitmap. First longword contains count of bytes in 
bitmap. Second longword contains physical address of bitmap. (Same 
rules as for RPB$(i.PFNMAP listed above.) 

Quadword. 

A 48-bit (actually a quadword is allocated) booting node address which 
is initialized when performing a network boot. This field is copied firom 
the target system address parameter of the parameters message. (The 
DECnet HIORD value is added if the field was 2 bj-tes.) 

Set as needed. 



Cluster interface high PFN. 

Boot node name which is initialized when performing a network boot. 
This field is copied fi-om the target system name parameter of the 
parameters message. 

Host node addi-ess (this value is only initialized when booting over the 
network). This field is copied from the host system address parameter 
of the parameters message. 

Host node name (this value is only initialized when performing 
a network boot). This field is copied firom the host system name 
parameter of the parameters message. 

Time of day (this value is only initialized when performing a network 
boot). The time of day is copied firom the first 8 b}rtes of the host 
system time parameter of the parameters message. (The time 
^fferential values are NOT copied.) 

Pointer to data retrieved from request of the parameter file. 



The rest of the argument list is zeroed. 
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The error messages issued by the KA670 firmware fall into three catgories: 

• Halt code messages 

• VMB error messages 

• Console messages 

In general, error messages are in cryptic, to avoid the space requirements of translating 
a large number of messages. 

J.1 Halt Code Messages 

The messages in Table J-1 are issued by the firmware whenever the processor halts 
(except on power-up, which is not treated as an error condition). 

For example: 

?0 6 HLT INST 
PC = 800050D3 

The number preceding the halt message is the halt code This number is obtained from 
SAVPSL<13:8>(RESTART_CODE), IPR 43, which is written on any CVAX processor 
restart operation. 
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Table J-1 HALT Messages 



Code Message 



Description 



?02 


EXT HLT 


_03 




?04 


ISP ERR 


?05 


DBLERR 


?06 


HLT INST 


?07 


see ERR3 


?08 


SCBERR2 


?0A 


CHM FR ISTK 


?0B 


CHM TO ISTK 


?0C 


SCB RD ERR 


?10 


MCHK AV 


?11 


KSPAV 


?12 


DBLERR2 


?13 


DBLERR3 


?19 


PSL EXC5- 


?1A 


PSL EXC6* 


?1B 


PSL EXC7* 


?1D 


PSL REI5' 


?1E 


PSL REI6- 


?1F 


PSL REI7' 


?3F 


MICROVERIFY 
FAILURE 



External hnlt, caused by either console BFIEAK condition, 
Q22-bus BHALT_L, or DBR<AUX_HLT> bit was set while 
enabled. 

Power-up, no halt message is displayed. However, the 
presence of the firmware banner and diagnostic countdown 
indicates this halt reason. 

In attempting to push state onto the interrupt stack during 
an interrupt or exception, the processor discovered that the 
interrupt stack was mapped NO ACCESS or NOT VALID. 

The processor attempted to report a machiine check to the 
operating system, and a second machine check occurred. 

The processor executed a HALT instruction in kernel mode. 

The SCB vector had bits <1:0> equal to 3. 

The SCB vector had bits <1:0> equal to 2. 

A change mode instruction was executed when PSL<IS> was 

set. 

The SCB vector for a change mode had bit <0> set. 

A hard memory error occurred while the processor was trying 
to read an exception or interrupt vector. 

An access violation or an invalid translation occurred during 
machine check exception processing. 

An access violation or translation not valid occurred during 
processing of a kernel stack not valid exception. 

Double machine check error. A machine check occured while 
trying to service a machine check. 

Double machine check error. A machine check occured while 
trying to service a kernel stack not valid exception. 

PSL<26:24> = 5 on interrupt or exception. 

PSL<26:24> = 6 on interrupt of exception. 

PSL<26:24> = 7 on interrupt or exception. 

PSL<26:24> = 5 on an rei instruction 

PSL<26:24> = 6 on an rei instruction. 

PSL<26:24> = 7 on an rei instruction. 

Microcode power-up self-test failed. 



•For the last aix cases, the VAX architecture does not allow execution on the interrupt stack while in a mode 
other than kernel. In the first three cases, an interrupt is attempting to run on the interrupt stack while 
not in kernel mode. In the last three cases, an REI instruction is attempting to return to a mode other than 
kernel and still run on the interrupt stack. 
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J.2 VMB Error Messages 

The following enors are issued by VMB (Table J-2): 
Table J-2 VMB Error Messages 



Code Message 



Description 



?40 


NOSUCHDEV 


?41 


DEVASSIGN 


?42 


NOSUCHFILE 


?43 


PILESTRUCT 


?44 


BADCHKSUM 


?45 


BADFILEHDR 


?46 


BADIRECTORY 


?47 


FILNOTCNTG 


?48 


ENDOFFILE 


?49 


BADFILENAME 


?4A 


BUFFEROW 


?4B 


CTRLERR 


?4C 


DEVINACT 


?4D 


DEVOFFLINE 


?4E 


MEMERR 


?4P 


SCBINT 


?50 


SCB2NDINT 


?51 


NOROM 


?52 


NOSUCHNODE 


?53 


INSFMAPREG 


?54 


RETRY 


?55 


IVDEVNAM 


?56 


DRVERR 



No bootable devices found. 

Device is not present. 

Program image not found. 

Invalid boot device file structure. 

Bad checksum on header file. 

Bad file header. 

Bad directory file. 

Invalid program image format. 

Premature end of file encountered. 

Bad file name given. 

Program image does not fit in available memory. 

Boot device I/O error. 

Failed to initialize boot device. 

Device is offline. 

Memory initialization error. 

Unexpected SCB exception or machine check. 

Unexpected exception after starting program image. 

No valid ROM image found. 

No response ft-om load server. 

Invalid memory configuration. 

No devices bootable, retrying. 

Invalid device name. 

Ehive error. 
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J.3 Console Error Messages 

The following error messages are issued in response to a console command that has 
erroKs) (Table J-3): 



Table J-3 Console Error Messages 



Code Message 



Description 



?61 


CORRUPTION 


?62 


ILLEGAL 
REFERENCE 


?63 


ILLEGAL COMMAND 


?64 


INVALID DIGIT 


?65 


LINE TOO LONG 



?66 



ILLEGAL ADRRESS 



?67 


VALUE TOO LARGE 


?68 


QUALIFIER 
CONFLICT 


?69 


UNKNOWN 
QUALIFIER 


?6A 


UNKNOWN SYMBOL 


?6B 


CHECKSUM 


?6C 


HALTED 


?6D 


FIND ERROR 


?6E 


TIME OUT 


?6F 


MEMORY ERROR 


?70 


UNIMPLEMENTED 


?71 


NO VALUE 
QUALIFIER 


?72 


AMBIGUOUS 
QUALIFIER 


?73 


VALUE QUALIFIER 


?74 


TOO MANY 
QUALIFIERS 


?75 


TOO MANY 
ARGUMENTS 



The console program database has been corrupted. 

Illegal reference. The requested referenaj would violate 
virtual memory protection, the address is not mapped, the 
reference is invalid in the specified address space, or the value 
is invalid in the specified destination. 

The command string cannot be parsed. 

A number has an invalid digit. 

The command was too large for the console to buffer. The 
message is issued only after receipt of the terminating 
carriage return. 

The address specified falls outside the limits of the address 
space. 

The value specified does not fit in the destination. 

Qualifier conflict, for example, two different data sizes are 
specified for an EXAMINE command. 

The switch is unrecognized. 



The symbolic address in an EXAMINE or DEPOSIT command 
is unrecognized. 

The command or data checksum of an X command is incorrect. 
If the data checksum is incorrect, this message is issued 
rather than being abbreviated to Illegal command. 

The operator entered a HALT command. 

A FIND command failed either to find the RPB or 128 Kbytes 
of good memory. 

During an X command, data failed to anive in the time 
expected (60 seconds). 

A machine check occurred with a code of SOis or 81i6, 
indicating a read or write memory error. 

Unimplemented function. 

Qualifier does not take a value. 



There were not enough unique characters to determine the 
qualifier. 

Qualifier requires a value. 

Ibo many qualifiers supplied for this command. 

Tbo many arguments supplied for this command. 
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Table J-3 (Com.) Console Error Messages 



Code Message 



?76 AMBIGUOUS 

COMMAND 

?77 TOO FEW 

ARGUMENTS 

?78 TYPEAHEAD 

OVERFLOW 

?79 FRAMING ERROR 

?7A OVERRUN ERROR 

?7B SOFT ERROR 

?7C HARD ERROR 

?7D MACHINE CHECK 



Description 



There were not enough unique characters to determine the 
command. 

Insufficient arguments supplied for this command. 

The typeahead buflFer overflowed. 

A framing error was detected on the console serial line. 
An overrun error was detected on the console serial line. 
A soft error occurred. 
A hard error occurred. 
A machine check occurred. 
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BBU RAM 

Battery backed-up RAM. On the KA670, this is 1 Kbyte of battery backed-up RAM on the 

SSC. 

BFLAG ^ , 

Boot flags is the longword suppHed in the SET BFLAG and BOOT /R{>: commands that 
qualify the bootstrap operation. SHOW BFLAG displays the current value. 

BHALT 

Q22-bus HALT signal, usually associated with the halt switch on the front panel. 

BIP 

Boot in progress flag in CPMBX<2>. 

CPMBX 

Console program mailbox is used to pass information between operating systems and the 

firmware. 

CQBIC 

Q22-bus interface chip. 

DCOK 

Q22-bus signal indicating dc power is stable. This signal is usually associated with the 

restart switch on the front panel. 

DNA 

Digital network architecture. 

EPROM 

Erasable programable read only memory. Used on some products to store firmware. 
Commonly used synonyms are PROM or ROM. Erasable by using ultraviolet light. 

DE 

Diagnostic executive. A component of the ROM-based diagnostics responsible for set-up, 
execution, and clean-up of component diagnostic tests. 

Firmware 

Firmware in this document refers to 256 kilobytes of VAX instruction code residing 
at physical address 20040000 on the KA670. Functionally, it consists of diagnostics, 
bootstraps, console, and halt entry/exit code. 
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GPR 

General-purpose registers. On the KA670, these are the 16 standard VAX longword 
registers, RO through R15. The last four registers, R12 through R15, are also known by 
their unique mnemonics AP (argument pointer), FP (frame pointer), SP (stack pointer), 
and PC (program counter). 

IPL 

Interrupt priority level. Ranges from to 31 (0 to IFie). 

IPR 

Internal processor registers. On the KA670, these are implemented by the CPU chip 
set. These longword registers are only accessible with the instructions MTPR (move to 
processor register) and MFPR (move from processor register) and require kernel mode 
privileges. This document uses the prefix PR$_ when referencing these registers. 

KA670 

Q22-bus CPU processor module, DSSI port, and Ethernet adapter. 

LED 

Light emitting diode. 

MSCP 

Mass storage control protocol. Used in Digital disks and tapes. 

MOP 

Maintenance operations protocol. Specifies message protocol for network loopback 
assistance, network bootstrap, and remote console functions. 

ms 

Milhsecond (lOe-3 seconds). 

PC 

Program counter (R15). 

PCB 

Process control block. A data structure pointed to by the PR$_PCBB register. Contains 
the hardware context for the current process. 

PFN 

Page frame number. An index of a page (512 bytes) of local memory. A PFN is derived 
from the bit field <23:09> of a physical address. 

PR$_ICCS 

Interval clock control and status (IPR 24). 

pn$_iPL 

Interrupt priority level (IPR 18). 

PR$_MAPEN 

Memory management mapping enable (IPR 56). 

PR$_PCBB 

Process control block base register (IPR 16). 
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PR$_RXCS 

R(X)eceive console status (IPR 32). 

PR$_RXDB 

R(X)eceive data buffer (IPR 33). 

PR$_SAVISP 

Saved interrupt stack pointer (IPR 41). 

PR$_SAVPC 

Saved program counter (IPR 42). 

PR$_SAVPSL 

Saved program status longword (IPR 43). 

PR$_SCBB 

System control block base register (IPR 17). 

PR$_SISR 

Software interrupt summary register (IPR 21). 

PR$_TODR 

Time-of-day register (IPR 27). Commonly referred to as the time-of-year register or TOY 

clock. 

PR$_TXCS 

T(X)ransmit console status (IPR 34). 

PR$_TXDB 

T(X)ransmit data buffer (IPR 35). 

PSL PSW 

Processor status longword. The VAX extension of the PSW (processor status word). The 
PSW (lower word) contains instruction condition codes and is accessible by nonpnvileged 
users. However, the upper word contains system status information and is accessible by 
privileged users. 

QBMBR 

Q22-bus map base register found in the CQBIC. Determines the base address in local 

memory for the scatter/gather registers. 

QDSS 

Q22-bus video controller for workstations. 

QNA 

Q22-bus Ethernet controller module. 

QMR 

Q22-bus map register. 

RAM 

Random acess memory. 

RIP 

Restart in progress flag in CPMBX<3>. 
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RPB 

Restart parameter block. A software data structure used as a communication mechanism 
between firmware and the operating system. Information in this block is used by the 
firmware to attempt an operating system (warm) restart. 

SCB 

System control block. A data structure pointed to by PR$_SCBB. THESCB contains a list 
of longword exception and interrupt vectors. 

SGEC 

Second-generation Ethernet chip. 

SHAC 

Single host adapter chip. 

SP 

Stack pointer (R14). 

SRM 

Standard reference manual, as in VAX SRM. 

ssc 

System support chip. 

MS 

Microsecond (lOe-6 seconds). 

VMB 

Virtual memory boot. The portion of the firmware dedicated to booting the operating 
system. 
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A 

abort, 36 

Architecture, 19 to 243 



B 

Backplane wiring, 349 
BBURAM 

CPMBX, 402 

partitioning, 401 
Block mode DMA, 336 
Boot and diagnostic facility, 121 

battery backed-up RAM!, 125 

boot and diagnostic register, 121 

CP bus timeout control register, 130 

diagnostic LED register, 123 

EPROM memory, 124 

initialization, 126 
Boot block format, 263 
boot devices 

names, 258 
Boot devices 

supported, 259 
Boot flags, 260 
bootstrap 

conditions, 256 

device names, 275 

disk and tape, 263 

initialization, 256 

memory layout, 257 
Bootstrap 

memory layout, 262 

network, 264 

PROM, 264 

sample output, 261 
Bus adapter, 9 
Bus cycle protocol, 326 
Bus drivers, 347 
Buses 

CPbus, 120 

GMI, 120 

RDAL, 119 
Bus interconnecting wiring, 349 
Bus length (DSSI), 18 
Bus overview, 119 to 120 
Bus receivers, 348 



Bus termination. 
Byte count, 38 



348 



c 

Cabling 
DSSI, 18 
ISE, 18 
Cache 

backup (second level), 7 
primary (first level), 7 
Cchip, 7 

Central processing unit (CPU), 6, 21 to 
52 
accelerator control and status register, 

49 
CPU references, 50 
data-stream read, 51 
data types, 30 
exceptions, 33 

classes, 36 

information saved on a machine 
check, 38 
general-purpose registers 

See also Registers 
halt 

codes for exceptions, 47 

codes for unmaskable interrupts, 
47 

console, 220 

CPU state after a, 46 

hardware procedure, 46 
instruction set, 30 
internal processor registers, 23, 28, 58 

See also Registers 
internal state information, 42 
internal VA register 

contents, 41 
internal VIBA register, 41 
interrupts, 33, 34 

priority level, 34 
interval counter control status register, 

41 
intniction-stream read, 51 
machine check exception, 221 
machine checks, 38 

error register contents, 43 

floating point errors, 39 
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39 



Central processing unit (CPU) 
machine checks (cont'd.) 
interrupt error, 40 
memory management error, 
microcode error, 40 
RDAL bus error, 41 
read error, 40 
write error, 41 
memory management, 31 
memory management control register, 

32 
processor state, 21 
processor status longword, 22 

contents, 43 
process structure, 29 
program counter 
contents, 42 
Program counter 

definition of, 22 
shift count (SO register 

contents, 42 
software interrupt summary register 
contents, 42 
definition, 35 
system control block, 43 

format, 43 
system identification, 48 
translation buffer, 31, 32, 33 
write references, 51 
Central Processing unit (CPU) 

exceptions, 36 
CI-DSSI overview 

arbitration and selection, 201 
BLINK, 201 
command-out phase, 202 
datagram, 201 
FLINK, 201 
message, 201 
move data, 201 
RSPQ, 202 

undeliverable message, 201 
Configuration, 13 to 18 

DSSI, 15 
CONFIGURE command, 14 
Console 

serial line, 110 

console registers, 110 
services, 247 
Console connector pins, 361 
Console module, 11 
Control functions, 346 
CQBIC, 9 



Data transfer bus cycles, 
DATBI bus cycle, 338 
DATBO bus cycle, 340 
DC511, 7 
DC520, 6 
DC523, 7 
DC527, 9 
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DC541, 9 

DC542, 8 

DC561, 9 

DC592, 7 

Device addressing, 327 

Device priority, 342 

Direct memoiy access, 334 

DMA guidelines, 341 

DMA protocol, 334 

DSSI 

bus length, 18 

bus termination, 18 

cabling, 18 

configuration, 15 

drive order, 15 

node ID, 15 

node name, changing, 15 

unit number, changing, 16 



Error handling, 213 

console error halt, 214 

errors without notification, 242 

hard error interrupt, 214, 234 

I/O device interrupt, 215 

kernel stack not valid exception, 241 

kernel stack not valid, 215 

machine check, 214 

notification, 215 

power fail, 214 

power-fail interrupt, 

soft eiTor interrupt, 

summary, 214 
Errors 

soft 

cache or memory, 
Etemet interface, 9 
Ethernet connector, 11 
Ethernet overview 

broadcast address, 147 

multicast address,, 147 

multicast-group address, 

physical address, 147 



234 
214, 237 



239 



147 



F 

fault, 36 
F-chip, 7 
firmware 

block diagram, 248 
Firmware ROMs, 8 
Floating point acceUsrator, 7, 52 to 53 

instructions, 52 
Floating point accelerator (PPA) 

data types, 52 

power-up state, 53 
Floating point accel^^rator (FPU chip) 

operand and result transfer, 52 
Floating point errora, 38 
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G 

G-chip, 



H 

H3604, 11 

Halt, 346 

Halt actions 

external halt, 251 
restoring context, 252 
saving context, 249 
summary, 250 

Hardware components, 4 



I 

Imperfect filtering, defined, 187 
Initialization, 346 
Installation, 13 to 18 
Interrupt protocol, 342 
Interrupts, 341 
Interval timer, 116 
Intrabackplane bus wiring, 349 
Invalidate hits 

support for cache invalidates, 105 
Invalidate lookup 

support for cache invalidates, 105 



K 

KA670 CPU module 

hardware components, 4 
overview, 3 to 9 
photograph, 3 



Load definition, 347 



M 

Machine check code parameter, 38 
Machine check stack frame 

AT, 223 

byte count, 222 

delta-PC, 222 

DL, 223 

fault code, 222 

ICCS..SISR, 222 

opcode, 223 

PC, PSL, 223 

RN, 223 

SC, 223 

VA, 222 

VAX restart bit, 222 

VIBA, 222 
Manchester-encoded format, 146 
Mass storage interface, 8, 198 



Mass storage interface (cont'd.) 
CI-DSSI OVERVIEW, 201 
SHAC registers, 203 
single host adapter chip, 199 
Memory 

backup cache, 54 

address translation, 69 

backup tag store, 72 

behavior on writes, 71 

C-chip error address register, 84 

control register, 80 

data block allocation, 71 

error address register, 84 

externa! process registers, 71 

flush backup tag store register, 85 

flush primary tag store register, 
86 

index register, 76 

organization, 69 

overview, 68 

physical address translation, 69 

primary cache tag store C-chip 
copy, 73 

refresh register, 75 

tag and valid bits, correspondence 
to data, 69 
cache 

controlling, 86 

internal processor registers, 58 
cacheable references, 54 
C-chip, 54 
error detection 

modified Hamming code, 101 
error detection and correction, 101 
error recovery, 86 
G-chip bus timeout, 98 
G-chip controller, 87 
G-chip GMI port, 100 
G-chip Nonexistant addresses, 98 
G-chip peripheral (CP port), 99 
G-chip port, 87 
G-chip registers, 88 
G-chip transactions and port 

interactions, 104 
G-chip write buffers, 87 
initialization, 86 

diagnostics, 86 
main memory system, 87 to 109 
pagemode support, 101 
primary cache, 54 

address translation, 56 

backup cache tag store C-chip copy, 
73 

behavior on writes, 58 

data and tag layout, 55 

data block allocation, 58 

data entry, 56 

detectable double errors, 68 

detectable single errors, 67 

diagnostics, 65 

error address register, 62 

error handling, 65 

error recovery, 64 
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Memory 

primary cache (cont'd.) 
index register, 63 
initialization, 65 
maintaining consistency, 83 
organization, 55 
overview, 55 
status registers, 58 
tag array register, 64 
tag entry, 55 

writing and reading the tag array, 
64 
refresh, 104 
tag store 

reenabling, 83 
use of the C-chip registers, 86 
Memory controller, 9 
Memory error detection 

syndrome examples, 102 
Memory module, 10 
Memory support subsystem, 9 
Modified Hamming code 

memory error detection, 101 
Module 

configuration, 14 
order, in backplane, 13 
Module contact finger identification, 353 
MOP functions, 388 
MS670, 10 



N 



146 



Network interface, 

Ethernet 

overview, 146 

station address ROM, 
Network listening, 387 



Q22-bus electrical characteristics, 346 
Q22-bus four-level inteiTupt configura- 
tions, 345 
Q22-bus interface, 9, 132 

CP translation, 137 

DMA error address register, 144 

DMA system error register, 142 

error address register, 143 

error handling, 145 

interprocessor communications facility, 
137 

interrupt handling, 139 

main memory address translation, 133 

map configuring, 139 

system configuration register(SCR), 
140 
Q22-bu8 signal assignments, 322 



R 

Registers 

general-purpose, 21 

internal processor, 21, 23 

processor, 21 
RF-series disk drive 

access to firmware through DUP, 17 

cabling, 18 
ROM partitioning, 396 
RPB 

initialization, 407 
Runt packets, 146 
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o 

OOP 

cabling, 18 
120-Ohm Q22-bu8, 347 
Operator console panel 

SceOCP 



P 

P-chip, 6 

Power status, 346 

Power supply loading, 353 

Power-up 

memory layout, 384 
PR$_SAVPC, 249 
PR$_SAVPSL, 249 
PR$_TBIA, 252 
Process 

definition of, 29 
Programmable timers, 116 



Setup frame, 183 
SGEC, 9 

loopback operations, 196 
SHAG, 8,199 

Signal level specifications, 347 
SSC, 7 
Support for cache invalidates 

invalidate hits, 105 

invalidate lookup, 105 
Syndrome examples 

memory error detection, 102 
System configurations, 350 
System support subsyntem, 7 



Tlme-of-year clock, 115 
trap, 36 
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VAX restart bit (R), 38 

VMB 

description, 260 
procedure, 261 
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KA670 Technical Manual Update 

This document provides updated information for the KA670 CPU Module Technical 
Manual, EK-KA67a-TM-001. 

SSC Configuration Register, Bits <18:16> 
(Page 128) 

The third sentence in the bit description for bits <18:16> (Halt Protect Space) should 
read "These bits should be set to IOI2..." 

Setting these register bits to IIO2 allows the SSC to protect 512 Kbytes. This is 
unnecessary, because the EPROM contains only 256 Hbytes. 

Networic Interface SGEC Revision 4.0 
(Pages 148 to 198) 

The SGEC revision 4.0 needs a code patch if the virtual addressing mode (SVAPTE or 
PAFTE) is used for addressing the transmit buffers. 

To apply this patch, perform the following steps: 

1. Set the following diagnostic descriptor in the transmit descriptor list (page 178), to 
download the code into the SGEC internal memory. This descriptor must be placed 
before the setup_fTame descriptor (page 184) with <IC> set, or must be followed by 
an end_of_list (descriptor owned by the host) to be able to ^mdironize the code load 
completion on NICSR5<TI> interrupt. 

Diagnostic descriptor format: 

DDES0<31:0> = SOOOOOOOie OW = 1. 

DDES1<31:0> = SOSOOOOOw DT = 3, WD= 1, ST = 0. 

DDES2<31:0> = 00OB22AAi6 load dze = 11 code words, 

SGEC load address = 22AAie. 

DDES3<31:0> = Buffer physical must be word-aligned. 

address 

The buffer pointed to by DDES3 must contain the following data: 

D854lE79i6 

PP7PDA53i6 

C0195E79is 

D95lC018ie 

C3575E79i6 

0000031Ci6 

2. After setting NICSR5<ID> (page 155) and before starting the receive or transmit 
process, perform the following steps: 

• Load the host address of t^e diagnostic descriptor in NICSR4 (page 153). 



• Write the following command in NICSR6 (page 160): 

<EI> = To disable the SGEC interrupts to the host. 

<0M> = 3 Tb enter diagnostic mode. 

<ST> = 1 lb precede the diagnostic descriptor (and eventually the setup 

descriptor). 

• Poll on NICSR5<TI> to wait for the completion of the code load. 

• Write A2AA0369i6 in NICSR14 (page 170) to initialize the breakpoint. 

• Poll on NICSR5<DN> to wait for the completion of the NICSR14 write. 

At this point, the code patch is initialized and the normal initialization sequence can go 
on. 

Console BOOT Command 
(Page 275) 

Format 

BOOT [qualifier] [{boofjdevice} Uhoot_device}]...] 

Description 

The console initializes the processor and transfers execution to VMB. VMB attempts to 
boot the operating system from the specified device or the default boot device, if none is 
specified. 

If a list of devices is specified, VMB attempts to boot from each device in turn. VMB 
transfers control to the first successfully booted image. Network de\nices should always 
be placed last in a list, since network bootstraps only terminate if a fatal hardware error 
occurs or an image is successfully loaded. 

Console SET Command 
(Page 299) 

SET BOOT 

When using the console SET BOOT command, you may also specify a device list. 
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KA670 Technical Manual Update 

This document provides updated infonnation for the KA670 CPU Module Tkchnical 
Manual, EK-KA670-TM-001. 

SSC Configuration Register, Bits <18:16> 
(Page 128) 

The third sentence in the bit description for bits <18:16> (Halt Protect Space) should 
read "These bits should be set to 1012..." 

Setting these register bits to IIO2 allows the SSC to protect 512 Kbytes. This is 
unnecessary, because the EPROM contains only 256 Kbytes. 

Network Interface SGEC Revision 4.0 
(Pages 148 to 198) 

The SGEC revision 4.0 needs a code patch if the virtual addressing mode (SVAPTE or 
PAFTE) is used for addressing the transmit buffers. 

To apply this patch, perform the following steps: 

1. Set the following diagnostic descriptor in the transmit descriptor list (page 178), to 
download the code into the SGEC internal memory. This descriptor must be placed 
before the setup_frame descriptor (page 184) with <IC> set, or must be followed by 
an end_of_list (descriptor owned by the host) to be able to synchronize the code load 
completion on NICSR5<:TI> interrupt. 

Dis^nostic descriptor format: 

DDES0<31:0> = SOOOOOOOie OW = 1. 

DDES1<31:0> = 30800000is DT = 3, WD = 1, ST = 0. 

DDES2<31:0> = 000B22AAi6 load size = 11 code words, 

SGEC load address = 22AAi6. 

DDES3<31:0> = Buffer physical must be word-aHgned. 

address 

The buffer pointed to by DDES3 must contain the following data: 
D8541E79ifi 

PP7PDA53i6 
C0195E79i6 
D951C018i6 
C3575E79i6 
OOOOOSlCie 

2. After setting NICSR5<ID> (page 155) and before starting the receive or transmit 
process, perform the following steps: 

• Load the host address of the diagnostic descriptor in NICSR4 (page 153). 



• Write the following command in NICSR6 (page 160): 

<EI> = To disable the SGEC interrupts to the host. 

<0M> = 3 Tb enter diagnostic mode. 

<ST> = 1 lb precede the diagnostic descriptor (and eventually the setup 

descriptor). 

• Poll on NICSR5<:TI> to wait for the completion of the code load. 

• Write A2AA0369i6 in NICSR14 (page 170) to initialize the breakpoint. 

• Poll on NICSR5<DN> to wait for the completion of the NIC£iR14 write. 

At this point, the code patch is initialized and the normal initialization sequence can go 
on. 

Console BOOT Command 
(Page 275) 

Format 

BOOT [qualifier] [{hootjievice) UhootJIevice}]...] 

Description 

The console initializes the processor and transfers execution to VMB. VMB attempts to 
boot the operating system from the specified device or the default boot device, if none is 
specified. 

If a list of devices is specified, VMB attempts to boot from each device in turn. VMB 
transfers control to the first successfully booted image. Network defaces should always 
be placed last in a list, since network bootstraps only terminate if a fatal hardware error 
occurs or an ims^e is successfully loaded. 

Console SET Command 
(Page 299) 

SET BOOT 

When using the console SET BOOT command, you may also specify a device list. 
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